News for hackers. Stuff that matters.

A comment on JMAP: Like IMAP but Not Really. Parent comment

Re:JMAP: Like IMAP but Not Really by aepiepaey on Friday January 25, 2019 @08:08AM (#18997567)
Just to make it clear, is this true if you use your own domain, or just if you use any of Fastmail's domains?
[ Parent | on HN ]
Re:JMAP: Like IMAP but Not Really by Riverheart on Friday January 25, 2019 @08:23AM (#18997651)
Seems to be just Fastmail domains but there might be some setup involved for custom domains. See their docs

https://www.fastmail.com/help/technical/senderauthentication...

[ Parent | on HN ]
Re:JMAP: Like IMAP but Not Really by bscphil on Friday January 25, 2019 @02:03PM (#19001230)
If I understand this correctly, you need to be managing your own DNS (not letting Fastmail do it), and you probably need to set p=reject in your DMARC so that non-fastmail servers can't spoof your addresses.

And if Fastmail allows Fastmail user A to spoof Fastmail user B, then the above still only protects you against non-Fastmail customers.

[ Parent | on HN ]
Re:JMAP: Like IMAP but Not Really by eggsampler on Friday January 25, 2019 @08:32AM (#18997704)
I have received a spoofed email from my own domain, so I believe it's not just Fastmail domains but any custom domain on an account.
[ Parent | on HN ]
Re:JMAP: Like IMAP but Not Really by Riverheart on Friday January 25, 2019 @08:47AM (#18997801)
Do you host your custom domain with Fastmail? I may have misread but the article seemed to suggest you could potentially setup dmarc via the DNS page or whoever you host with.
[ Parent | on HN ]