<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<div class="moz-cite-prefix">On 16.5.2019 4.32, emordin via dovecot
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:H_ajEEUScjQ9Ss2X19SHtXDhV8ix8NhX6szDu6tL2b13a88jwJSRs78lV-BPF2weQPKN1YNYAWF8aMFgSjtUcHEM4bZrgJqnpsvtaany3HY=@protonmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div>Hi,<br>
</div>
<div>I have setup up a simple mail server using the ISPMail
tutorial and I'm trying to learn how to create email encryption
at rest.<br>
</div>
<div><br>
</div>
<div>I'm having a tough time understanding how to set this up...<br>
</div>
<div><br>
</div>
<div>So say a user logins thru roundcube and they type in their
password...so the password authenticates to the mysql database
which is storing their encrypted private key?? And once they
access that private key, how do they use that private key to
unencrypt their mailbox?<br>
</div>
<div><br>
</div>
</blockquote>
<p><br>
</p>
<p>You can export mail_crypt_global_private_key_password from userdb
to specify how to do derive password to decrypt the private key.
Or just provide it there. Private key should be exported as
mail_crypt_global_private_key variable in userdb, and the
corresponding public key mail_crypt_global_public_key.<br>
</p>
<p><br>
</p>
<blockquote type="cite"
cite="mid:H_ajEEUScjQ9Ss2X19SHtXDhV8ix8NhX6szDu6tL2b13a88jwJSRs78lV-BPF2weQPKN1YNYAWF8aMFgSjtUcHEM4bZrgJqnpsvtaany3HY=@protonmail.com">
<div>I'm a super noob at this, and I may be off, but I don't know
where to start when it comes to setting this up... if I'm way
off could you just recommend some tutorials or other basics I
should learn first before moving on to setting this up?<br>
</div>
<div><br>
</div>
<div class="protonmail_signature_block">
<div class="protonmail_signature_block-user
protonmail_signature_block-empty"><br>
</div>
<div class="protonmail_signature_block-proton">Sent with <a
href="https://protonmail.com" target="_blank"
moz-do-not-send="true">ProtonMail</a> Secure Email.<br>
</div>
</div>
<div><br>
</div>
</blockquote>
<br>
Aki<br>
</body>
</html>