If are processing Europeans voice mail you have to check if that is even allowed, could be a problem with GDPR legislation.

-----Original Message----- Subject: RE: How to Modify Message and add more Attachments

Thanks, am planning to use Google's Speech-to-Text.

-----Original Message----- Sent: Tuesday, October 6, 2020 3:39 PM To: dovecot dovecot@dovecot.org; Mrinal Sharma msharma@smithmicro.com Subject: RE: How to Modify Message and add more Attachments

CAUTION - EXTERNAL EMAIL This email originated from outside of Smith Micro Software. Do not click links or open attachments unless you recognize the sender and know the content is safe.

Hmmm, that does not sound nice storing files as email. Maybe use document database? Look at this[1], see if it is possible to use the rados plugin to store files directly as objects?

What are you using for speech to text?

[1] https://github.com/ceph-dovecot/dovecot-ceph-plugin

-----Original Message----- To: dovecot@dovecot.org Subject: How to Modify Message and add more Attachments

Hello Everyone,

I am working on a product in which we are planning to store voice messages in Dovecot sent by a user to another user. The message would be stored as an email with .wav attachment. Once the Voice message is received, it may get Transcribed. The message can be further be processed and more information can be added to the message later. The original plan was to Modify the email and add New information as attachments to same message.

As I understood, messages stored in Dovecot are immutable. What is the best option to achieve this functionality?

Thanks,

Mrinal

No. Many think that sensitive data is prohibited to process/store as email at all, but thats not true. What can be prohibited, is sending sensitive data as email, ergo letting it leave as SMTP email, depending on circumstances, because that might mean that the sensitive data is sent unencrypted. Or that unauthorized individuals (like the remote email administrator at the receiver) has access to the data.

Injecting sensitive data directly into an email system by internal means, is as allowed as saving the sensitive data as word documents or similiar. Just because you use .eml format of the storage doesn't mean its prohibited.

What this means, is that if you do inject GDPR sensitive data into an email system, then the email system may need additional security, like local at-rest encryption at the server and maybe an additional VPN layer with 2FA to access the email server. It depends on how sensitive the data stored is, and you might need routines to auto-delete data from the emails once the storage period is over. The biggest problem with using email as GDPR data storage, is if you allow any email adress to be used, the data could end up outside of EU (third country) if the employee's provider is located there which is prohibited.

But here its about using email FORMAT as storage only.

Or to make it more blunt: Sending sensitive info as postcards may be prohibited depending on circumstances, but converting mail sent securely into postcards when they have arrived into the secure facility, is usually no problem at all - it depends on how you store them afterwards.

-----Ursprungligt meddelande----- Från: dovecot-bounces@dovecot.org dovecot-bounces@dovecot.org För Marc Roos Skickat: den 6 oktober 2020 22:17 Till: dovecot dovecot@dovecot.org; msharma msharma@smithmicro.com Ämne: RE: How to Modify Message and add more Attachments

If are processing Europeans voice mail you have to check if that is even allowed, could be a problem with GDPR legislation.

-----Original Message----- Subject: RE: How to Modify Message and add more Attachments

Thanks, am planning to use Google's Speech-to-Text.

-----Original Message----- Sent: Tuesday, October 6, 2020 3:39 PM To: dovecot dovecot@dovecot.org; Mrinal Sharma msharma@smithmicro.com Subject: RE: How to Modify Message and add more Attachments

CAUTION - EXTERNAL EMAIL This email originated from outside of Smith Micro Software. Do not click links or open attachments unless you recognize the sender and know the content is safe.

Hmmm, that does not sound nice storing files as email. Maybe use document database? Look at this[1], see if it is possible to use the rados plugin to store files directly as objects?

What are you using for speech to text?

[1] https://github.com/ceph-dovecot/dovecot-ceph-plugin

-----Original Message----- To: dovecot@dovecot.org Subject: How to Modify Message and add more Attachments

Hello Everyone,

I am working on a product in which we are planning to store voice messages in Dovecot sent by a user to another user. The message would be stored as an email with .wav attachment. Once the Voice message is received, it may get Transcribed. The message can be further be processed and more information can be added to the message later. The original plan was to Modify the email and add New information as attachments to same message.

As I understood, messages stored in Dovecot are immutable. What is the best option to achieve this functionality?

Thanks,

Mrinal