All this new excitement with Lemmy and federation has got me thinking that maybe I should learn to run my own instance. What always comes up though is how email is the orginal federated technology.

I am looking at proxmox and see that is has a built in email server, so now I am wondering if it is time to role my own.

I stopped using gmail a long time ago, and right now I use ProtonMail, but I am super frustrated with the dumb limitation of only having a single account for the app. I get why they do it, and I am willing to pay, but it is pricey and I don’t know if that is my best option. I guess it is worth it since ProtonVPN is included. It looks like they are expanding their suite.

Is it worth it? Can I make it secure? Is it stupid to run it off a local computer on my home network?

  • Admiral Patrick@dubvee.org
    link
    fedilink
    English
    arrow-up
    26
    ·
    edit-2
    2 years ago

    Yes, I still run my own email server. It is not for the faint of heart, but once it’s configured and your IP reputation is clean, it’s mostly smooth sailing. I have not had any deliverability problems to date, initial setup/learning period notwithstanding.

    If you’re not scared away yet, here are some specific challenges you’ll face:

    • SMTP ports are typically blocked by many providers as a spam prevention measure. Hosting on a residential connection is often a complete non-starter and is becoming more difficult on business class connections as well (at least in the US, anyway).
    • If you plan to host in a VPS, good luck getting a clean IPv4 address. Most are on one or more public blacklists and likely several company-specific ones (cough Microsoft cough). I spent about 2 weeks getting my new VPS’s IP reputation cleaned up before I migrated from the old VPS.
    • Uptime: You need to have a reliable hosting solution with minimal power/server/network downtime.
    • Learning Curve: Email is not just one technology; it’s several that work together. So in a very basic email server, you will have Postfix as your MTA, Dovecot as your MDA, some kind of spam detection and filtering (e.g. SpamAssassin), some kind of antivirus to scan messages/attachments (e.g. Clamd), message signing (DKIM), user administration/management, webmail, etc. You’ll need to get all of these configured and operating in harmony.
    • Spam prevention standards: You’ll need to know how to work with DNS and create/manage all of the appropriate records on your domain (MX, SPF, DMARC, DKIM records, etc). All of these are pretty much required in 2023 in order for messages from your server to reach your recipient.
    • Keeping your IP reputation clean: This is an ongoing challenge if you host for a lot of people. It can only take one or two compromised accounts to send a LOT of spam and land your IP/IP block on a blacklist.
    • Keeping up with new standards: When I set my mail server up, DMARC and DKIM weren’t required by most recipient servers. Around 2016, I had to bolt on OpenDKIM to my email stack otherwise my messages ended up in the recipient’s spam folder. -Contingency Plan: One day you may just wake up and decide it’s too much to keep managing your own email server. I’m not there yet, but I’ve already got a plan in place to let a bigger player take over when the time comes.
    • phase_change@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      2 years ago

      Yep. I’ve hosted my own mail server since the early oughts. One additional hurdle I’d add to you list is rDNS. If you can’t get that set up, you’ll have a hard time reaching many mail servers. Besides port blocking, that’s one of the many reason it’s a non-starter on consumer ISP.

      I actually started on a static ISDN line when rDNS wasn’t an issue for running a mail server. Moved to business class dsl, and Ameritech actually delegated rDNS to me for my /29. When I moved to Comcast business, they wouldn’t delegate the rDNS for the IPv4. They did create rDNS entries for me, and they did delegate the rDNS for the IPv6 block. Though the way they deal with the /56 IPv6 block means only the first /64 is useable for rDNS.

      But, everything you list has been things I’ve needed to deal with over the years.

      • Admiral Patrick@dubvee.org
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        2 years ago

        Yeah, I totally forgot about reverse DNS. Good catch. I probably left out a few other things what with the repressed trauma of it all. lol.

        I had to deal with Suddenlink business, and they were (somehow) surprisingly worse than what you described for Comcast (I didn’t know that was possible, TBH). Suddenlink wouldn’t even unblock the SMTP ports at all let alone delegate rDNS to our static.

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 years ago

      Wow. I am emotionally ready for the challenge, but not intellectually, and maybe not even financially.

      IP reputation is such a new concept to me, but I have already come across it when the IP from the VPN I am using is blacklisted. Super annoying. I really have to reconsider my threat level because I am starting to get the feeling that I do not need it. I am a good boy and don’t pirate much, mostly books. And for the naughty stuff… well I didn’t feel unsafe before I started a VPN.

      Well, you have given me a lot to think about. Thanks!

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      arrow-up
      5
      ·
      2 years ago

      That was a sobering read. We all feel victorious when we see big tech fail after they wronged their users, but fundamental technologies that actually run the world have already been lost, and may never be recoverable for egalitarian use.

    • 2xsaiko@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      2
      ·
      2 years ago

      Great post!

      I’m a rather dismayed to see those universities and institutes nowadays no longer as pioneers and innovators in this area, but instead as mere consumers of ready-made corporate solutions, following corporate interests and centralising solutions. I have two employers, both academic, and both have resorted to big-tech corporations that offer solutions like e-mail as a service.

      Same here, my university recently switched from their Horde webmail to Exchange. The new outlook webmail is absolutely awful and I couldn’t set up all the filters that I had before. Luckily I could enable IMAP login, thankfully without OAuth because imo that’s another awful practice, so I can connect to it with non braindead mail clients. Still a massive downgrade and I bet they now have to run it on a 10x as powerful server because I hear Exchange is an absolute monster in terms of resource usage.

      (Also, I’ve been self-hosting mail for probably 4 years at this point. Here’s to many more!)

    • styraco@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 years ago

      Aren’t you afraid about some important email getting discarded without you knowing about it? Or about unnoticed downtime which results in missed mails?

      • proycon@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        2 years ago

        When I am sending? Well, once things are set up properly I’m pretty confident that things arrive (though nobody can ever be 100% sure of course). I also tend to mail to the same recipient domains a lot, like for work and hobby projects, so once those are tested you get pretty confident.

        Unnoticed downtime is usually quickly noticed, I depend on my server for a lot of things. Senders are often resilient enough to keep things in their queue and try a few times. There’s also a fallback MX registry at my (3rd party) DNS host which will queue stuff in case the primary MX goes down.

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      I like what you write, I am going to look deeper into it. It really sucks that the nearly utopian promises of the future and newfound freedoms have been progressively squashed. Every ‘disruption’ that looked like a return to that utopia has ultimately been evil and firmly entrenched in the capitalist mindset.

      I am glad it is still possible. I think it would be healthy for me and everyone else to practice digital homesteading, to become self-sufficient while still being able to lean on the greater community of like minded people.

    • linearchaos@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 years ago

      Tbh, that document reads like a discovery channel 2am aliens documentary, but it’s not completely without merit.

      There are a couple line items about software services they’re using that are shitty that sound pretty legit. The fact that they’re operating in locations where they might have to hand over data sounds pretty legit. Their warrant compliance and logging/handing over a person’s IP address is legit.

      The CIA honeypot stuff is all really circumstantial. If the CIA was in as deep as is claimed, a lot of the real evidence people are turning up that they’re not a secure as they could be would be unnecessary.

      My best guess is they decided to make an email company based in Switzerland with the schtick that they’re secure (banks amirite?) They’re doing what they can to appear secure without spending too much money. They’re not going to have legal battles to keep your data private, and they are going to comply with agencies request for data. Even if they support end-to-end encryption if they are required by an agency to turn that encryption off for you, they’re going to do it.

      They’re probably less likely than Google or Microsoft to sell all of your data to the highest bidder, but realistically there’s no such thing as secure email.

      • Sploosh the Water@vlemmy.net
        link
        fedilink
        English
        arrow-up
        6
        ·
        2 years ago

        The basic assumption every privacy-concerned person should have about email is that it’s never secure. Unless you use an offline cryptography program to encrypt your email text and then paste it into the email body before you send it, your emails are insecure.

        Email was never designed with that in mind. If you want to communicate securely with somebody, use a medium/method that has been designed from the start for that purpose.

        I use ProtonMail because it’s not a massive corpo and it’s open source, but I don’t believe that my emails are significantly more secure than on a service like Exchange or Gmail.

        • DidacticDumbass@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          2 years ago

          This has been my thinking about ProtonMail, even after reading the article on here, and even after reading https://digdeeper.club/articles/email.xhtml (which I have to reread because it keeps getting bigger).

          There is no perfect solution, just different levels of trust. That is right, if I want to be “secure” I got to act like a journalist and use a temporary solution or something that has end-to-end encryption.

          Besides, email is meant for public communication. No reason to elevate it into some something it will never be.

          • Sploosh the Water@vlemmy.net
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 years ago

            Yeah. In my experience, you have to be careful in the world of tech privacy/FOSS to not fall off a cliff to the extremes.

            You can always find reasons to not trust some piece of tech hardware or software. It’s all too complex and multifaceted to fully vett, and even when you can do that, there isn’t anything that isn’t touched in some way by mega-corps or glowie agencies.

            Tor was developed by the US gov, same with the ancestor of the internet. Your network traffic runs on mega-corp wires, through mega-corp servers. Your hardware is developed, built, and distributed by mega-corps, as is most the firmware and microcode in them.

            Even Richard Stallman, one of the most hardcore Free Software advocates has concessions he makes for firmware, microcode, and so forth.

            The only way to be truly and completely secure tech-wise is to pull a Ted K. And go run into the woods and live in a little cabin, disown any tech built after the turn of the century lol.

            It’s “all or something” not, “all or nothing.” Determine your threat model, your ethical bounds, and let those principles guide you. I think fundamentally what all FOSS folks have in common is the idea that the tech you use should serve your needs and desires, not the needs/desires of billion dollar mega-corps farming you as a product.

            • DidacticDumbass@lemmy.oneOP
              link
              fedilink
              English
              arrow-up
              2
              ·
              2 years ago

              This is the most sane perspective I have read. For sure it is important to have solid principles and do the right things whenever possible, but no one gets to demand changes for something they never contributed to, especially not those things that took a massive amount of money and human power to build. We are all standing on the soldiers of giants, and it is insane to think we can be Ratatouille, controlling them for out benefit.

              The only way to change governments and mega-corps is to make it unprofitable when they do the things we don’t like, or make it so doing the right thing makes them lots of money.

              Thanks for this, it is the reality check I need to make good decisions. Even if I do become the Unidumbass, the people I love who would never follow me into that lifestyle.

              • Sploosh the Water@vlemmy.net
                link
                fedilink
                English
                arrow-up
                3
                ·
                edit-2
                2 years ago

                I actually have a formal methodology for how I engage with software/hardware from a FOSS perspective:

                Embrace, Subvert, Accept.

                For any task I do currently or want to do, I apply this process:

                I first try to find and use any FOSS software/hardware that does that thing well enough to use entirely. (Embrace)

                If there isn’t a FOSS solution that exists or does essential things I need, then I use a proprietary technology in a subversive way to do it. So cracked copies, jail broken or otherwise hacked hardware, or using the proprietary service through an unofficial/unapproved 3rd party app. (Subvert)

                If I can’t do that either, but the task/need is absolutely critical, only then do I accept using proprietary and unmodified software/hardware. (Accept)

                This method has worked pretty great for me. Now about 3 years after starting my FOSS journey, I have almost no software/hardware I use that is in that third category. Basically everything I use is FOSS, hacked, cracked, modded, or runs on platforms that are, and I enjoy tech and computing more than I ever have :)

                • DidacticDumbass@lemmy.oneOP
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  ·
                  2 years ago

                  This is a good method. It is our duty to do everything we can to live by our principles, and be careful about the compromises we make. The more I go deep into FOSS, the more I discover. So much exists, it just takes some work on our part to fit it to our needs. Programming competency does not have to be high, just enough to fix any compile errors.

    • BoneALisa@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      What’s the saying? If you can’t tell if it’s ignorance or malice, it’s probably the former?

      however, with all of these points, even if it is ignorance, the lying about encryption (even though I don’t really use it) is upsetting. That plus the other lies I’ve seen them pull is enough to make me consider switching to something else.

      Got any recs? Lol

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      Fascinating read. I have a lot to research. It is not like ProtonMail is the only alternative provider… there are so many, I just like all the extras that they are attaching to it.

  • thekernel@lemmy.ml
    link
    fedilink
    English
    arrow-up
    10
    ·
    edit-2
    2 years ago

    Not worth the hassle - best compromise is to get your own domain but use a provider like fastmail to host it.

    If they turn sour you can move your domain to another mail host.

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      4
      ·
      2 years ago

      I think this is the solution I was thinking about in the first place. I was just musing about it being part of a home lab. I have to consider whether this solution is is better than just paying for secure email.

      • thekernel@lemmy.ml
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 years ago

        There are advantages to having your own domain - you can use something like vendor8832@yourdomain.com so each site you sign up to gets their own unique “to” address, that way you can easily send their mail to trash when you dont’ need to deal with them anymore, and will also let you know what company had a data breach if that unique email address starts to get spam.

        • DidacticDumbass@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 years ago

          This is what I want! I want that granular control of having an email address compartmentalized for specific kinds of communication. I mean, I know it is something provided by basically all email providers, but I don’t know, for sure there are limitations. A unique address for each website seems like such a smart thing to do, on top of being stingy with giving out my email address.

          • timbuck2themoon@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            Protonmail at certain levels gives you simple login with unlimited aliases. Something to look into. I love it and have been with them for years.

            • DidacticDumbass@lemmy.oneOP
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 years ago

              Thank you! I was also looking for validation that Protonmail is worth the purchase, since I use them anyways.

          • psilves1@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            Firefox Relay is by far the easiest (and imo best) solution for that

            You can try it for free and if you use it enough it only costs $24 a year

              • psilves1@lemmy.world
                link
                fedilink
                English
                arrow-up
                2
                ·
                2 years ago

                Your first 5 email masks are free and if you install the extension a little icon will appear in most email fields. Let’s you create a new mask right there.

                If you buy the premium version you can get your own custom subdomain: @XXXX.mozmail.com where you pick XXXX

                This way you don’t even need the extension. You can just do something like “Lemmy@XXXX.mozmail.com” and Relay will “create” that email for you. Cannot recommend it enough, especially since it’s free to start

                • DidacticDumbass@lemmy.oneOP
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  2 years ago

                  That actually seems really awesome, like it defeats the reason I would ever want to create multiple email accounts, which is to manage different contexts like professional, personal for family and friends, commercial email for online stores, and email lists.

  • sunbeam60@lemmy.one
    link
    fedilink
    English
    arrow-up
    9
    ·
    2 years ago

    Despite my willingness to self-host almost everything, e-mail remains the last frontier for me. Keeping abreast of standards, keeping up today, avoiding implications in abuse and many, many smaller issues abound … and that’s despite my fixed IP and ISP willing to set up a reverse-DNS for me.

    Instead I’ve gone with a paid email provider that I’m REALLY happy with.

  • beepboopdanger@lemmy.skl.works
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    2 years ago

    Running a mail server these days is not that difficult. While using pre-assembled stacks like mailcow only the DNS entries needs to be done. If you want to run it at home you should do some research on routing all the traffic through a wireguard tunnel to preserve a public IP other mail instances will accept

  • DrinkMonkey@lemmy.ca
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    2 years ago

    Not likely worth it. Primary reason is that the large federated email services are skeptic also of email from services such as your proposed self hosting solution and may simply not deliver the mail you send. This is to mitigate against spammers setting up a bespoke servers.

    There are a bunch of other things that could go wrong if you don’t set everything up perfectly, but even if you do, this would be a big problem.

    Better off using a custom domain with a big provider. Fewer headaches. I like Fastmail, but many others are great too.

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      Thank you for the tip! Any advice on buying a domain name? It is something I should have done decades ago but was never sure about.

      I have basically no web developmetnt experience, but perhaps that will force me to keep it simple. Get that old web style we all miss.

      I would love to have my own website for personal web services, and eventually something professional. I just don’t want to overpay for something like Squarespace or whatever, and it seems dumb to not have full control.

  • neutron@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    2 years ago

    I did for a couple years, but moved to mailbox.org a while ago. The effort was much to high to save a few bucks and there is no real upside to it. E-Mail is a troublesome mixture of different protocols from the internet stone age held together by chewing gum (SMTP, POP3, IMAP, DNS, database or file storage, maybe ActiveSync, Web-Mailer, …)

    Even when everything is up and running there is always maintenance to keep your SSL certificates up to date, update your incoming spam filter technique, keep other mail providers assured that you are not spamming (DKIM, etc.), keep all the different system services (see above) up to date and interoperable, etc. and every few years when you want to move to a new server, provider or Linux distro you start it all over again.

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      2 years ago

      Damn, it is so bizarre that email of all things would be the least operable by tech savvy individuals. Someone linked an article that explains it, and it truly is depressing. Like, it makes me not want to even have email… which is not really possible if I want to be employed. Eh, it’s not like I DON’T already have free email accounts, I just don’t always like the decision my provider makes.

      • neutron@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 years ago

        Well, there are plenty of providers out there there should be one that suits you. Having a domain of your own with DNS access and letting the provider doing the hosting is not (so) hard and gives you the flexibility to switch any time.

        • DidacticDumbass@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          That is cool. Everytime I have created a new email account, it has been an island. Never learned to preserve emails… Well, except the one time I use Thunderbird. I should set that up again. Maybe it would solve my issue of multiple accounts??

          In any case I like consolidation and I don’t like logging into a website everytime if I can avoid it.

  • Thoms@red.cyberhase.de
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 years ago

    Just take a look at https://docs.mailcow.email/

    This runs from a small box with everything included. It gives you all the tools and config needed for running a secure and feature rich email service. Webmail, some sort of exchange emulation, webcalender on top of a solid postfix/dovecot install with rspamd as spam filter. Everything is configurable via a nice web UI.

    After 15y running my own mail service and editing a lot of config files, I use this piece of free and open software and find it very good. All you need is a box somewhere in the internet. Running from a homelab will instantly fail, expect you have a static ip.

    • SmugBedBug@lemmy.iswhereits.at
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 years ago

      Been using mailcow too. Pretty solid setup. Gmail doesn’t play nice with spam though even though SPF, dkim, and dmarc are properly setup. I ended up having to relay through sendgrid to ensure emails for delivered.

      Still don’t regret it though.

      • Thoms@red.cyberhase.de
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        Maybe google blocks large IP-blocks of vps-hosters like digital-ocean then? I moved My mail-setup from a 15y old ip with best reputation to a new one on the vps-hoster that is listed as provider on the mailcow-site. I have no problems at all, I have DMARC reports enabled and all mails to gmail are passing.

        The only provider that was blocking the ip was german telekom, t-online. I wrote a mail to the abuse/postmaster and with some asking for imprint on the webpage that the ip was pointing at, they whitelisted the ip in 24h.

        mailcow has some sort of dns-settings agent that shows the dns-settings for every domain, rDNS and DKIM, DMARC, SPF and check these settings with the values reported by the DNS.

        • SmugBedBug@lemmy.iswhereits.at
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          I’m with ovh dedicated. I just gave up on trying to fix the issue.

          I don’t remember mailcow having a list of recommended hosters. I’ll go check that out!

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      Neato! There seems to be a lot of solutions for running a mail server.

      Yeah, I think it is time, I need to get familiar with Docker.

      Yeah, I was clueless thinking I could run it from my home. Hah. I just wanted to avoid paying for a VPS. Which is silly because I buy too much crap all the the time and have multiple subscriptions.

      This is actually valauable.

      • Thoms@red.cyberhase.de
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        mailcow lists a small german vps hoster with a fair price and the right sizing. It’s not a big hoster, gmail and microsoft are not blocking the ip-range and the ASN is not listed on any blacklist.

        The support is quick and helpful, rDNS was a matter of minutes to set up. You don’t need any deeper knowlegde of docker, since it is a one-time job to set the things up und get the stack running. The documentation of mailcow is very good.

        You can run it from home, but you will need a forward host like sendgrid and maybe a backup mx. You can set a primary ip and a backup ip wich will get all the mails when the primary host is down. I guess, there a comercial or free backup-mx services out there. No problem. If you have a static ip for your homelab or at least a dynamic dns-name, it will work. Recieving is easy. But you will need a good forward-service for sending.

        • DidacticDumbass@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 years ago

          Needing an extra service to forward emails seems to defeat the purpose of having everything local. Everything I read about email, being clear-text and whatever, makes it so it is impossible to improve. Email is a dead end, so I probably don’t actually want to get too involved with it the more I learn.

          I mean, growing up I really thought the internet would become a way to connect directly to people, computer to computer interaction. Everything requires an intermediate service, making everything insecure and expensive. What a stupid future.

          • Thoms@red.cyberhase.de
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            That’s right. Also important, email is not a playground for experiments. Once it runs, you should not touch it anymore, except for updates. Otherwise, you will do harm to your own way of communicating. One error, and you will lose all your reputation and someone spams half of the internet with your domain as sender.

            An when it runs, the only thing to improve is tuning the spam-filter for your instance. Implementing all the rules that you fight the other day, because otherwise your inbox explodes. So you have to do all the shady things and block ips, filter with blacklists and check every dns for all those extra entries, needed for delivering mail… You must become a part of the problem, spammers all behind every cracked wordpress and insecure vps out there.

  • UselesslyBrisk@infosec.pub
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    2 years ago

    I stopped running my own a while ago. Its no longer really decentralized and the big players (google/microsoft) will often just blacklist you for little reason.

    That said I DO maintain my own domain and backups. So i can take my email to whatever hosting provider I want.

    I also noticed, during the migration, that if you simply register your domain with one of the big players (ie: Google Workspace or M365) you will often get whitelisted and email will flow easier. This was easier when they had a free tier though.

    • SmugBedBug@lemmy.iswhereits.at
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 years ago

      Got the same issue. Everything was setup properly. SPF, dkim, dmarc was all good. Server IP wasn’t in any blocklists. But my messages would still fall in spam with Gmail.

      Ended up setting sendgrid as a relay and all is good now.

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      I guess you got to play the game if you want to win. I Google and Microsoft have the same level of trust from me, so it goes to whoever makes it easier.

      • UselesslyBrisk@infosec.pub
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        Pretty much. Its kinda nuts. I just host with Google at this point. Its easier though privacy is a disaster. I consider email to be public at this point though after the Snowden stuff. Have considered moving to something like Photon but their lack of support for contact syncing makes it tough, specifically for my wife. She uses Apple Mail as well, which i THINK photon can now support via IMAP or something, but not having contacts synced is hard.

        That said I back up all of my Google workspace stuff, email included, to a local synology using their app. So i have copies of everything should I need it (ie: google decides to suspend me for no reason.)

        • DidacticDumbass@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          Damn. Privacy is something I was hoping would be a benefit from self-hosting.

          I mean, I haven’t taken the bite yet but it is way more than I can chew. I am not keen on basic stuff like encryption.

          Hell, I just want to have both my email accounts on my phone without paying for it. I think privacy is worth paying for, but I need to be smart about what I trust.

          • UselesslyBrisk@infosec.pub
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            Here’s the catch with email via privacy. Unless you are gpg encrypting the email even photon doesn’t matter, as whoever you are sending to likely has it unencrypted at rest on their server.

            And while tls in transit is better than it used to be with their smpts or starttls, plenty of mail servers don’t do it. So even transport is an iffy game sometimes.

            At the end of the day, it’s better to

            A. GPG encrypt the email. Which requires both ends to be technically competent. B. Consider it to be quasi public, like talking quietly in a coffee shop. Most won’t hear it but if someone does shrug

            • DidacticDumbass@lemmy.oneOP
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 years ago

              Right. One of the articles someone linked basically explained this limitation. So, privacy is kind of an illusion, or a half-true marketing gimmick.

  • ComeHereOrIHookYou@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    2 years ago

    I originally did but the maintenance burden was killing me. Then last year Proton unified their subscription with VPN and Mail (also upgrading my Proton VPN only subscription to Proton plus) and from there I decided to just go all in on Proton mail. I integrated my domain to Proton mail and never looked back.

    • Chimrod@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 years ago

      Same. One day I realized that emails where toi important for beeing host by an amateur me. 😉

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      It seems like the most sane solution. It is not that expensive for the basic tier given my needs and how important email is for daily functioning. Plus, the perks are pretty damn awesome. I have been paying for mullvad, who are solid, but the more I learn about VPNs, the more it feels like warm blanket than real armor, at least for how I use it.

      ProtonMail does have some sketchy history that someone pointed out, but I also think that it is really hard to set up a service that offers every feature and not make a concession somewhere.

      • ComeHereOrIHookYou@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 years ago

        Well the use case for VPN for me is more into traffic routing than staying secure. Sometimes I experience slow downloads but when I connect to the right VPN endpoint, it speeds up / regain back the download speed. The only reason why I picked ProtonVPN of all places is because it was (and still is) one of the VPN services that was isn’t bought over by a tech conglomerate that buy and stacks up VPN services (https://embed.kumu.io/9ced55e897e74fd807be51990b26b415#vpn-company-relationships/protonvpn)

        As for ProtonMail being sketchy and honeypot is as old fear mongering as time itself. If you are sketchy about how ProtonMail works, just remember that ProtonMail requires a bridge client for external clients like Outlook and Thunderbird because of its e2ee nature (therefore not compatible with traditional email clients). The bridge client code is open for you to see as well (https://github.com/ProtonMail/proton-bridge) and you can even compile it yourself if you want to.

  • leopardboy@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    2 years ago

    I used to run my own mail server many, many years ago (early 2000s), but today it’s a lot more difficult. I personally don’t think it’s worth it, but I do have my own domain that I can host anywhere I choose. At the moment, I’m using Fastmail. Lots of nice features, and no complaints.

    • DidacticDumbass@lemmy.oneOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 years ago

      Yeah, I think getting my own domain is the first step I have never taken. Closest thing to web development I have done is a Neocities I have not messed with since getting an account.

      • leopardboy@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 years ago

        You definitely don’t need to worry about a web site if you want to just use the domain for email.

        Feel free to hit me up if you have any questions about it. Some providers make it pretty easy I think to setup and manage all of that together, while others require some manual work on your part.

        • DidacticDumbass@lemmy.oneOP
          link
          fedilink
          English
          arrow-up
          3
          ·
          2 years ago

          Thank you for the offer! There seems to be a lot of packages that automate all the hard stuff, so I think the hardest part is actually getting my own domain and paying for a remote server.

          Any suggestions on that?

          • Matt@netmonkey.tech
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 years ago

            Replying to you from my new instance here.

            I know that Fastmail can sort that out for you, and get the domain you want setup for email. I believe they can register the domain, too, but I know they can at least host the DNS. That would be my personal suggestion.

            • DidacticDumbass@lemmy.oneOP
              link
              fedilink
              English
              arrow-up
              2
              ·
              2 years ago

              As much as I want to control every aspect, I am clearly not ready for the responsibility, at least not yet.

              Fastmail is attractive because it streamlines so much. It looks really clean too. ProtonMail seems like a better deal because of the VPN, but it just feels like I am getting sucked into this growing company that may not even be all that great.

              Yeah, this is on my shortlist. $36 for the basic is good to me. I will be trialing it!

              • Matt@netmonkey.tech
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 years ago

                Cool!

                Some features I really like include the following.

                • They’ve got a totally decent email client.
                • You can have more than one domain, if you want.
                • You can use masked email, which is really nice for privacy reasons.

                Good luck!

                • DidacticDumbass@lemmy.oneOP
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  2 years ago

                  I am basically sold. I still want to learn how to set up my own server. I think it would be valuable to have an intranet accessed by VPN for REAL PRIVATE STUFF.

                  Any suggestions for uses cases with masked email? I think I get the concept and have ideas of how to make use of it, but maybe I am missing some scenarios. Like, can I have a prepared list of address to give out to strangers? Some times it is necessary, but I don’t want some rando to take advantage of my trust.