News for hackers. Stuff that matters.

A comment on Helm: Personal Email Server. Parent comment

Re:Helm: Personal Email Server by lrvick on Wednesday October 17, 2018 @02:05PM (#18241754)
Well if it does VPN first, then initiates the SMTP connection with TLS on the local smtp server all the way to the RX mail server, then this works out fine.

A lot of mail servers don't support this though, so it would be on the client to also be able to ensure it will not relay mail except to TLS endpoints verified by a well known CA.

In my experience this is rarely the case, but if it is and Helm is willing to tell end users "sorry I can't safely send mail to this endpoint" then I could see some value to this approach.

[ Parent | on HN ]
Re:Helm: Personal Email Server by gsreenivas on Wednesday October 17, 2018 @07:51PM (#18244833)
Yes - we initiate a VPN connection first to the gateway, then inbound/outbound connections are over TLS. Over 92% of email traffic is over TLS and we will be exposing an option in the future where customers can require it or reject emails.
[ Parent | on HN ]