Comment on Email ownership, I give up.
webghost0101@sopuli.xyz 1 day agoI think the general gist is as beginner self hosters we get more and more comfortable too “easily spin up a docker webserver”
At some point we arrive at “what other services can i host” and email is a pretty obvious addition expecting it to at least not be more difficult then running nextcloud.
It may be doable but hell is it not a comparable challenge.
I fully agree …
Email server require to understand what and why you are doing. This is a steep step up from spinning docker containers.
Nothing against docker containers, I run quite a few myself… But indeed a successful email server is a different beast.
Many people also try self host it at home, and this is a serious issue with email due to the residential ip address as well.
But it can be done successfully and it’s a great feeling of accomplishment when you do it. And you learn way more than using containers
Also all containerized solutions for email require the understanding and additional steps like DNS done properly as well .
Tetsuo@jlai.lu 1 day ago
I worked for years on a large email infrastructure for a job and for me it’s absolutely not worth it either.
I would prefer to take a subscription on a reputable host.
Why?
Because even if I do everything perfectly at setup (TLS, SPF, DKIM, DMARC) that will still be precarious.
The security of SMTP is a patchwork of protocols added on top of it and a bunch of opaque reputation systems. If anything ever goes wrong with my email my domain’s reputation would fall. And that’s the thing, once your domain reputation goes too low, you can’t fix right away and say “my bad” and recover. Your mail will be silently blocked like Spam until a few days of sending perfectly clean emails. You need time to recover.
So mail self hosting is accepting that at any time if you make a slight mistake, your communications to other will be almost impossible for days. And again since a lot of it is reputation based you can’t fix the issue and recover immediately.
The business I was working for had everyday scenarios like that. A client that failed to update its DKIM and didn’t notice right away. When they do their reputation on for example Cisco’s platform is super low and we filter them as spam. And then it took days for them to recover even if they fixed the DKIM just one or two days after their mistake.
On the other hand I could take a protonmail subscription and use a domain that has so much volume and is tracked so carefully in term of reputation that I know my mails will be received and have all the necessary security done right.
These reputation systems are inherently difficult for small volume mail domains. There is no other users ln your domain so one mistake is all it takes to start having delivery issues and most importantly silent failed deliveries that you dont know about.
Is it possible? Yes. Is it necessary? Not really. If you can pay for a privacy respecting host…
Hence for me it’s not worth it because there are privacy respecting providers so it’s not like I absolutely have to self host it.