Conversation

manu

@TheLifeOfHarmo

·

Oct 17, 2021

gonna forgo the dnssec since no ones uses it apparently. Finally got amavis+clamav working. Next is spamassassin and the txt records and nginx+mta-sts. and then finally roundcube

Quote Tweet

manu

@TheLifeOfHarmo

·

Oct 9, 2021

Next is amavis (clamav+spamassassin), spf+dmarc+dkim+mta-sts+dnssec,sieve filtering and finally roundcube

Show this thread

6

Daniel Micay

@DanielMicay

Replying to

@TheLifeOfHarmo

If you don't have DNSSEC, there isn't a secure way to retrieve your MX/A/AAAA/SPF/DKIM/DMARC records and you don't have a way to bootstrap authenticated encryption in a secure way. DANE is also much more widely supported than MTA-STS and doesn't rely on trusting every CA.

2:09 PM · Oct 18, 2021·Twitter Web App

2

Likes