mjl-

5 ms·

1.
by mjl- 1y ago
What I'm wondering: Are the salaries high? Not just because you've been employed at the job for a long time with regular raises, but because it's hard to find developers.
2.
by mjl- 1y ago
Congrats on the release! Having calendaring (and address book) along with your email makes it easy to run your own self-hosted PIM infrastructure.
3.
by mjl- 1y ago
Using tls client auth certificates for submission would make slightly more sense indeed. But who would request LE certificates to install them on desktops/phones of individuals? That sounds more complicated than managing your own clien
4.
by mjl- 1y ago
Most SMTP traffic is encrypted nowadays, at least "opportunistically", without verification. Only with MTA-STS enabled for the server will an SMTP client (that's delivering to an SMTP server) verify the TLS certificate agains
5.
by mjl- 1y ago
> I started writing a guide to IMAP back when I was working on an email client I would be very interested in hearing from developers about how they write email clients that need to work with all the servers out there, with the varying le
6.
by mjl- 1y ago
> Any sane client will instead use UIDs for everything Yes! Since last year there's the experimental UIDONLY extension that allows clients & servers to operate entirely without message sequence numbers. Saves quite a bit of acco
7.
by mjl- 1y ago
> You can send lots of requests to a server and you have to tag them so you can match them up with responses later Yes, you can match the final OK/NO/BAD responses with the original command based on the tag. The annoying thing
8.
by mjl- 2y ago
Most of mox is written with acme (also some vim)!
9.
by mjl- 2y ago
> multiple separate components Btw, I don't think it's better to have separate _components_ as in separate software packages. Integrating this functionality into one software package prevents all kinds of complexity that would
10.
by mjl- 2y ago
Yes, you can add domains, add accounts (which contain the mailboxes and messages), and configure addresses for the domains with accounts. So one account can have many addresses, at one or more domains, including catchalls.
11.
by mjl- 2y ago
> because the updates and security fixes are managed by Debian. Once things are configured, I don't need to do anything using unattended upgrades This is a good point. It would be great to have mox packaged in more distributions. I
12.
by mjl- 2y ago
> (which may already exist) - I'd love to be able to use my external spamassassin with it instead of (or even in addition to) the built in one This isn't possible yet. For me, the builtin filtering has been enough. But it'
13.
by mjl- 2y ago
> incoming emails didn't work from Microsoft but they fixed that in 0.13 Yeah, this one was interesting. It looks like microsoft updated their TLS stack to TLS 1.3, but incorrectly, breaking TLS connections to Go TLS servers. I don&
14.
by mjl- 2y ago
No, that won't work. The webmail uses a simple custom protocol. Perhaps someone can rewrite it using JMAP in the future...
15.
by mjl- 2y ago
> this allows those spam checks which will still work to benefit from the normal delivery path. It's not exactly the same. When a backup MX has accepted the message, it takes responsibility of the message, and will have to send a D
16.
by mjl- 2y ago
> I didn't find anything about sub-addressing in the features list. Is it a supported feature? Yes, assuming you mean addresses like user+<anything>@domain. The "+" is configured by default when you add a new domain.
17.
by mjl- 2y ago
From a security perspective, it is better to have separate & isolated processes (but written in modern languages that provide safety). Mox is currently a single process handling all connections, including deliveries over smtp, imap conn
18.
by mjl- 2y ago
Hi Bron! Thanks, JMAP will come at some point too! (: Someone has already been working on JMAP support in mox. I'm currently in a refactor of the storage layer, keeping history of (deleted) mailboxes too. Should address storage require
19.
by mjl- 2y ago
The looks match the intended audience. (: I'm focusing on functionality/protocol support now. User/admin-friendliness and making it more attractive will come later. Mox will become irresistible to the masses then!
20.
by mjl- 2y ago
Seems reasonable. I have been thinking about schemes for backup mx'es. When the primary is online, the backup would just forward the smtp connections to the primary directly. The backup mx only has to do their own work when the primary
21.
by mjl- 2y ago
I'm hoping to make this easier in the future, more often automatically taking care of updates. In the past, you've had to run a command/script here or there to fix up date, but that should all be done automatically. My talk a
22.
by mjl- 2y ago
> Does mox support antivirus addition No, not currently possible. I think it needs milter-like functionality in the smtp server. Would be good to have eventually.
23.
by mjl- 2y ago
There is some more information about spam filtering at the features page: https://www.xmox.nl/features/#hdr-junk-filtering I'm very happy with how the filtering works for me. Most email gets classified because of
24.
by mjl- 2y ago
1. no 2fa in the webmail yet. work is currently underway at the ietf for standardizing chained SASL (auth) mechanisms, and passkeys. i want to look at implementing passkeys already for the web interfaces, but there is much more on the todo-
25.
by mjl- 2y ago
I browsed through the article, but it's not clear to me if they're only encrypting data at rest (that you open up with a login session, but then: their referenced docs mention alice and bob exchanging messages, so that can't
26.
by mjl- 2y ago
I'm not so sure it's expensive (in general at least, not sure about their case). I think the typical approach for encrypting data is: Use asymmetric crypto to protect a master symmetric key. Then use that master key to get per-dat
27.
by mjl- 2y ago
fwiw, i recently had a need for checking the registration date of domains (to find the "age", for reputation purposes), and getting the information from rdap was pretty simple: a few http calls and parsing the response as json. i
28.
by mjl- 2y ago
for transparency of reproducible builds of go applications, i made https://beta.gobuilds.org/ . it compiles any publicly available go application on-demand, with a toolchain version of your choice (latest stable by default),
29.
by mjl- 2y ago
If I understand the notifications flow correctly: a device (typically mobile phone) will get a "registration" with a "push url" from its platform/provider (eg android/google or iphone/apple), which it hand
30.
by mjl- 2y ago
what if microsoft decides they not only want to load the URL in messages, but also click links and click buttons? presumably this is to detect bad/dangerous content. bad people will also just put that dangerous stuff behind a link or b

More ›