I just had an impressively pleasant customer service experience with @fastmail. Turns out it wasn't even their issue, but they responded quickly and in exactly the level of detail I needed.
It's so sad that it's so uncommon that it's worth tooting about...
Hello everyone! I wanted to share some exciting updates about the development of BSD Mail, our privacy-focused email service designed with robustness, security, and transparency in mind. Here’s a deep dive into the technical choices I've made, focusing on my use of open source solutions and open protocols:
🌍 Servers & Location
We're running on two physical servers:
One hosted by OVH in France
Another by Hetzner in Germany
Both servers operate on FreeBSD with NVMe drives in a ZFS mirror configuration for speed and data integrity.
🔒 Virtualization & Security
We utilize jails on both servers to ensure isolated environments for different services, managed via BastilleBSD. On one server, jails are set up directly on the hardware, whereas the other server employs nested jails.
Each server hosts a bhyve VM running OpenBSD with OpenSMTPD for handling SMTP duties securely.
🔗 Networking
A Wireguard setup connects the two servers, facilitating routing capabilities so that jails and VMs can communicate seamlessly, supporting both IPv4 and IPv6.
📧 Email Services
Dovecot is configured for maildir replication across the servers using Dovecot sync, ensuring email availability and redundancy.
Rspamd instances are tied to local KeyDB jails, set up in master-master replication for consistent and reliable spam detection and greylisting.
ClamAV runs in corresponding jails for virus scanning, maintaining a high level of security.
SOGo provides a web interface for email management, connected to MySQL databases in master-master replication to handle sessions and authentication smoothly.
💾 Data Management
Email data is stored on separate, encrypted ZFS datasets to secure emails at rest.
MySQL databases are used for storing credentials and managing sessions for SOGo, also in a master-master replication setup. Importantly, all passwords are securely hashed using bcrypt, ensuring they are salted and safe.
🔎 Monitoring & Reliability
Our DNS is managed through BunnyNet, which continuously monitors our server status. Should one server—or a specific service—become unavailable, DNS configurations are dynamically adjusted to avoid directing users to the affected IP until full service is restored.
🌐 Commitment to Open Source and Open Protocols
Every component of BSD Mail is built exclusively using open source software and open protocols. This commitment is crucial for ensuring data freedom and the reliability of the solutions we use.
This setup not only emphasizes our commitment to privacy and security but also our dedication to maintaining an open and transparent platform.
We're excited to bring you a service where your privacy, data integrity, and freedom are prioritized. Stay tuned for more updates!
Inwiefern ist DMARC und insbesondere sind dessen Report-Formate aggregate und forensic mit den Anforderungen der DSGVO vereinbar? Katharina Küchler (Anwältin, eco Verband) und ich (E-Mail Experte, Leiter Kompetenzgruppe E-Mail eco) sind dieser Frage im vollständig überarbeiteten Rechtsgutachten des #eco Verbandes nachgegangen.
People often talk about Emacs vs Vim. Every developer I’ve met uses Vim. Occasionally, some of the vim users will say they have previously emacs, but switched to vim.
So where are all the people who are currently using Emacs?
I’m not trolling or looking for an argument. I legit want to know!
@awoodsnet #Emacs has been great for writing, listening to internet radio, connecting to #mastodon and #matrix, managing multi #email accounts and maybe some #coding if I get bored. It's more than just a text editor and can be a #frontend to many great applications.
New #email feature request. A spam filter that checks to see whether the sending domain has an http server and any valid website whatsoever or it's just a spam factory.
I'm in the process of migrating from Google Workspace to Proton Mail, but I've hit a snag that might make me stick to Google. I have several email addresses for business, and yet Proton puts all emails in one inbox, which doesn't make any sense. So I'll get emails related to my writing in the same inbox as those for film, as personal emails, and as those for other work? I expected separate logins for each email.
I can’t get over how cool it is to view my posts from any server. I’m definitely going to use activitypub for my social media I’m planning on making. I was going to use @Discourse , but considering it’s like #GitLab where you are only able to self host and each instance of discourse can’t interconnect makes me kinda sad. But activitypub seems like the only way I feel happy in both ways.
I pride myself on running most of my own tech tools, but @fastmail is just too good to substitute for my business use. Have used since 2019 for email, calendar, and keeping contacts up-to-date.
It's simple, they don't send me ads and promos, and they have good spam filters.
Just thought I'd share that. Have a lovely rest of the day.
If you use #ACM#Email forwarding actively, HEADS UP.
#Google is now enforcing #DKIM policy and as of midnight last night is bouncing email from ACM.ORG addresses that did not come through the ACM #SMTP Relay service.
You need to change your email configuration to use the ACM SMTP Relay service immediately.
Here is a link for how to configure your mail service (including GMAIL) for the Mailroute SMTP Relay.
I donated to @thunderbird today to #freetheinbox. Join me to support communication privacy. (They need to add a Mastodon share intent on their donation page)
Proton Mail automatically encrypts/decrypts messages between Proton Mail accounts via OpenPGP/PGP.
Proton Mail supports automatically encrypting/decrypting messages between Proton Mail accounts and external email accounts that support OpenPGP/PGP or GnuPG/GPG.