[amilich]

We use an open-source mailserver (Haraka), but security audits are the most trustworthy way to do this. We've had 4: skiff.com/transparency. Audits cover infrastructure.

[tptacek]

You can't audit a non-E2EE design into E2EE security!