Interesting points

[szepeviktor]

• There is no guaranteed email delivery on the Internet - But Hold on!
• Inbound SMTP: Allow old/broken servers to connect? The internet is full of home-made ancient email servers violating every kind of standard. e.g. allow only reception over TLS 1.0+
• Outbound SMTP: the same, e.g. deliver only with TLS 1.0+
• Those standards include SPF, DKIM, DMARC: you have to draw a line somewhere
• Allow user submission only on port 578 with TLS 1.2+
• If there is a sysadmin do not allow users to change password, rotate passwords yearly
• Ban abusers and password probes for 10 minutes
• Encourage users not to use email accounts as file archive: there are service providers for collaborating/signing documents/contracts and large file sending

https://github.com/szepeviktor/debian-server-tools/blob/master/mail/README.md (all my knowledge)

[jaydrogers]

Thanks @szepeviktor! Wow, you definitely are an early bird. Thanks for sharing all of your knowledge!

I am currently working on getting everything organized in Nuxt Content. Hopefully I will have things pushed up within the next hour or so to at least have some scaffolding ready.

Thanks a ton for your resources!

[szepeviktor]

You're welcome.

Then you (a nerd :) ) must be interested in my email experiments

1. https://twitter.com/szepeviktor/status/1294246516492820481
2. https://github.com/szepeviktor/unique-email-address