SV: How to Modify Message and add more Attachments

[Sebastian Nielsen]

No. Many think that sensitive data is prohibited to process/store as email
at all, but thats not true. What can be prohibited, is sending sensitive
data as email, ergo letting it leave as SMTP email, depending on
circumstances, because that might mean that the sensitive data is sent
unencrypted.
Or that unauthorized individuals (like the remote email administrator at the
receiver) has access to the data.

Injecting sensitive data directly into an email system by internal means, is
as allowed as saving the sensitive data as word documents or similiar.
Just because you use .eml format of the storage doesn't mean its prohibited.

What this means, is that if you do inject GDPR sensitive data into an email
system, then the email system may need additional security, like local
at-rest encryption at the server and maybe an additional VPN layer with 2FA
to access the email server. It depends on how sensitive the data stored is,
and you might need routines to auto-delete data from the emails once the
storage period is over.
The biggest problem with using email as GDPR data storage, is if you allow
any email adress to be used, the data could end up outside of EU (third
country) if the employee's provider is located there which is prohibited.

But here its about using email FORMAT as storage only.

Or to make it more blunt: Sending sensitive info as postcards may be
prohibited depending on circumstances, but converting mail sent securely
into postcards when they have arrived into the secure facility, is usually
no problem at all - it depends on how you store them afterwards.

-----Ursprungligt meddelande-----
Från: dovecot-bounces at dovecot.org <dovecot-bounces at dovecot.org> För Marc
Roos
Skickat: den 6 oktober 2020 22:17
Till: dovecot <dovecot at dovecot.org>; msharma <msharma at smithmicro.com>
Ämne: RE: How to Modify Message and add more Attachments

 
If are processing Europeans voice mail you have to check if that is even
allowed, could be a problem with GDPR legislation.



-----Original Message-----
Subject: RE: How to Modify Message and add more Attachments

Thanks, am planning to use Google's Speech-to-Text.

-----Original Message-----
Sent: Tuesday, October 6, 2020 3:39 PM
To: dovecot <dovecot at dovecot.org>; Mrinal Sharma 
<msharma at smithmicro.com>
Subject: RE: How to Modify Message and add more Attachments

CAUTION - EXTERNAL EMAIL This email originated from outside of Smith 
Micro Software. Do not click links or open attachments unless you 
recognize the sender and know the content is safe.


Hmmm, that does not sound nice storing files as email. Maybe use 
document database? Look at this[1], see if it is possible to use the 
rados plugin to store files directly as objects?

What are you using for speech to text?

[1]
https://github.com/ceph-dovecot/dovecot-ceph-plugin




-----Original Message-----
To: dovecot at dovecot.org
Subject: How to Modify Message and add more Attachments

Hello Everyone,



I am working on a product in which we are planning to store voice 
messages in Dovecot sent by a user to another user. The message would be 
stored as an email with .wav attachment. Once the Voice message is 
received, it may get Transcribed. The message can be further be 
processed and more information can be added to the message later. The 
original plan was to Modify the email and add New information as 
attachments to same message.



As I understood, messages stored in Dovecot are immutable. What is the 
best option to achieve this functionality?



Thanks,

Mrinal





-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5715 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://dovecot.org/pipermail/dovecot/attachments/20201006/9d6069e7/attachment-0001.p7s>