Hacker News new | ask | show | jobs
by mikeash 3345 days ago
I agree on gaming, but e-mail often contains important information that I wouldn't want to suffer from random corruption.
1 comments

I don't understand why anyone would run their own email server. Cloud offerings work so well and are cheap.
Maybe they are under contract not to pass information to third parties or maybe the company policy is to not let internal email off the network.

That you don't understand it is likely from the perspective of an individual, possibly a private user. For those applications you can't beat the cloud. For business use every business needs to weigh their own needs.

Even then though, many business think they need to have their own server when they really don't and vice-versa.

Sure, but those are rare and usually include enough budget to include sysadmins and definitely enough to buy ECC memory. For anyone weighing whether ECC is worth it, they are wasting time managing their email server.
Those are not rare at all. Every lawyers office has this problem, every journalist, every banker, every insurance company, every notary public, every administration and so on.
Most of these are not contractually obliged to run their own email servers so whatever problem they have, it's not that specific one.
No, but they are contractually required to keep their customers (and their own) data confidential. And that can lead to them deciding to run their own mailservers as well as other infrastructure. Whether that's a good decision or not is another matter, that mostly depends on execution.
If you are using the cloud for email they can usually see all of your activity. Email is also how you typically reset passwords. It can expose corporate secrets.

In practice, nobody encrypts their email. And even if they do, the cloud still gets all the metadata.

Running your own trades the above issues for other issues, but depending on your priorities and fears it might be worth doing.

> in practice nobody encrypts their email.

I work in the defence industry. All attachments must be encrypted. Also, all customer data must be stored in the same country.

Cloud offering here: we run ECC memory on all our servers, natch. It's not turtles quite all the way down.
> cheap

Hard to beat free. Couple this with the fact that I learn something by setting it up makes this a win for me.

NSA agrees with you, for one.
NSA is not the primary threat here. More conventional legal mechanisms are. Home serving is just as vulnerable to the NSA.
Conventional legal mechanisms against your home server cabinet can be handled via full disk encryption and a reed switch on your cabinet door connected to your power strip.
Sounds fun until you have to open your cabinet door for legit reasons like swapping a faulty hard drive in your RAID array.
Huh? If you're going to swap a faulty hard drive you want to power off anyway.