How Not To Build An Email Server Appliance...

[wolstech]

Saw this on ARS today and thought it was a good read for interested: https://arstechnica.com/information-technology/2017/04/punching-holes-in-nomx-the-worlds-most-secure-communications-protocol/ (warning: LONG)

 

Basically, someone is selling a scam "secure" mail server appliance. It's actually a raspberryPi with a poorly written web UI, a bog-standard web/mail server, and tons of security holes as a high security mail appliance. Bonus for the fact that they managed to successfully (ab)use GoDaddy as a DDNS provider and didn't even make it set up the correct DNS records.