#starttls — Public Fediverse posts

Die kürzlich veröffentlichte Cyber-Sicherheitsempfehlung "Upgrade für die E-Mail-Sicherheit" ist ein Paradebeispiel für die lösungsorientierte Zusammenarbeit zwischen verschiedenen Abteilungen im BSI. Nur so konnten wir praxisnahe Empfehlungen aussprechen, die auf Beobachtungen der echten Welt da draußen beruhen. Oft können Unternehmen, die E-Mails über eine eigene Domain senden und empfangen, nämlich schon mit überschaubaren Aufwand ihre Sicherheit deutlich verbessern.

https://www.bsi.bund.de/DE/Service-Navi/Presse/Alle-Meldungen-News/Meldungen/Upgrade-E-Mail-Sicherheit_250526.html

#MailSecurity #TeamBSI #SPF #DKIM #DMARC #STARTTLS #DNSSEC #DANE #MTASTS #TLSRPT

now also available in English:
Four modern mail systems for self-hosting -- Universal support for mail security standards
https://www.sidn.nl/en/news-and-blogs/four-modern-mail-systems-for-self-hosting

An increasing number of mail software packages are now available that offer out-of-box support for all security standards, and are easy to set up as well. In this article, we consider four modern open-source packages for self-hosting: #Mox, #Chasquid, #Stalwart and #Maddy.

#SPF #DKIM #DMARC #DANE #STARTTLS #MTA-STS #InternetSecurity

@stalwartlabs

op SIDN.nl:
Vier moderne mail-systemen voor self-hosting -- Beveiligingsstandaarden voor mail universeel ondersteund
https://www.sidn.nl/nieuws-en-blogs/vier-moderne-mailsystemen-voor-self-hosting

Inmiddels zijn er meerdere software-pakketten beschikbaar die én alle beveiligingsstandaarden out-of-the-box ondersteunen én makkelijk op te zetten zijn. In dit artikel bespreken we vier moderne open-source mail-pakketten voor self-hosting: #Mox, #Chasquid, #Stalwart en #Maddy.

#SPF #DKIM #DMARC #DANE #STARTTLS #MTA-STS #InternetSecurity

@stalwartlabs

Oh man. #Grandstream, Access Point. You can configure to send alerts to a #mail recipient. Nice.

Except, whoever idiot implemented it, has been a *bit* to eager on "Lets force this secure".
The mail relay you want to use MUST support #STARTTLS. It MUST support #login with user/pass. You MAY skip validating the certificate.

NO way to tell it "Nope, mailrelay is local, it really does not need any login and no, it DOES NOT support tls". Just no way.

Useless.

I need a dummy #RubyLang #IMAP server that can support #STARTTLS but otherwise treats most commands as no-ops. I couldn't find anything well-maintained via GitHub or Ruby Toolbox other than the gem from Ruby's #stdlib at:

https://ruby-doc.org/3.2.2/gems/net-imap/Net/IMAP.html

Rather than gutting Net::IMAP, is there already a gem out there that can be used to support fetch-before-send clients like Apple's Mail that won't send email before completing POP3 or IMAP4 authentication?