News for hackers. Stuff that matters.
Re:Signal partners with Microsoft to bring end-to-end encryp... by yoavm on Thursday January 11, 2018 @03:05PM (#16127304)
If by "perfectly fine" you mean highly likely to get into your recipient's spam folder - you're probably right. Having tried to self host my own mail server I can tell you it's never an easy task to actually get your message across.
Re:Signal partners with Microsoft to bring end-to-end encryp... by Tepix on Thursday January 11, 2018 @03:56PM (#16127765)
That doesn't match my experience of running a mail sever for decades.
Re:Signal partners with Microsoft to bring end-to-end encryp... by e12e on Thursday January 11, 2018 @06:09PM (#16128938)
How long since you set up mail for a newly registered (possibly with previous owner) domain hosted on a VPN or rented dedicated server in an ip block that might have had previous owners?
Re:Signal partners with Microsoft to bring end-to-end encryp... by bostik on Saturday January 13, 2018 @01:26PM (#16140554)
Not sure if this is recent enough, but I moved my self-hosted email to a new address a little over 4 years ago.

The only systems that have had even tiny problems with were Gmail and Microsoft. With Gmail it took a while to build reputation as a non-offender. With Microsoft the first time I sent mail to their way, I got an automated bounce with instructions to forward to a certain address for human verification. That check round took maybe 12 hours and I haven't had any problems since.

I find that pretty reasonable.

Re:Signal partners with Microsoft to bring end-to-end encryp... by e12e on Sunday January 14, 2018 @09:19AM (#16144329)
Sounds like Microsoft (outlook.com and friends?) have improved since I sat things up - I never got a bounce. It'd be nice if Gmail was so considerate.

But how do you know that when you send mail to a new Gmail contact it won't be silently flagged as spam? And how many times will the recipient have to "un-flag" before the behaviour changeges?

> The only systems that have had even tiny problems with were Gmail and Microsoft

The "only" big provider missing from that list is apple (in the West anyway).

I've never meant to claim that smaller providers that know what they're doing aren't capable of sending proper bounces, setting proper smtp error codes on reception or of handling email to postmaster@.

It's just that with Gmail and outlook not being God net citizens - it becomes unreasonably hard to send legitimate email to a large percentage of Internet users. One possible "fix" is to send mail to Gmail users via a Gmail account and Gmail authenticated smtp servers - and so on for outlook.com - but as the number of "silos" one needs to send data to grows, that solution becomes cumbersome. Not to mention if you publish an mx record for your domain, you should be accepting email... That's the whole point...

Re:Signal partners with Microsoft to bring end-to-end encryp... by figgis on Friday January 12, 2018 @12:30AM (#16130606)
Two years ago? Still no issues.
Re:Signal partners with Microsoft to bring end-to-end encryp... by Spivak on Thursday January 11, 2018 @03:23PM (#16127464)
This comes up a lot but the reality is that its really only nerds and spammers that self-host. It's hard to fault spam filters of being suspicious of random domains. This doesn't mean there aren't many alternatives -- just about any personal email provider will make sure they're off the blacklists.
Re:Signal partners with Microsoft to bring end-to-end encryp... by e12e on Thursday January 11, 2018 @06:11PM (#16128947)
With Gmail it appears to be a question of getting on a (secret, opaque) white list.
Re:Signal partners with Microsoft to bring end-to-end encryp... by Spivak on Friday January 12, 2018 @09:40AM (#16133090)
I mean that's the nature of these kinds of lists. We don't tell anyone about how we set up our firewall, do spam filtering, or flag accounts for suspicious activity because then it would be easier to circumvent.
Re:Signal partners with Microsoft to bring end-to-end encryp... by e12e on Friday January 12, 2018 @11:46PM (#16138314)
There are plenty efficient rbl lists that are transparent. There's grey listing.

It's not like "today, you feel white-ish enough to not be silently dropped at gw, black-ish enough to go in the spam folder without warning" is the only valid policy to fight spam.

Even simply rejecting with an error (spam suspected) would be better than the silent treatment.

And I don't see anything wrong with telling people how you set up a firewall. We even write books about that.