Viewing profile — mjl-

What I'm wondering: Are the salaries high? Not just because you've been employed at the job for a long time with regular raises, but because it's hard to find developers.

Congrats on the release! Having calendaring (and address book) along with your email makes it easy to run your own self-hosted PIM infrastructure.

Using tls client auth certificates for submission would make slightly more sense indeed. But who would request LE certificates to install them on desktops/phones of individuals? Th…

Most SMTP traffic is encrypted nowadays, at least "opportunistically", without verification. Only with MTA-STS enabled for the server will an SMTP client (that's delivering to an S…

> I started writing a guide to IMAP back when I was working on an email client I would be very interested in hearing from developers about how they write email clients that need to…

> Any sane client will instead use UIDs for everything Yes! Since last year there's the experimental UIDONLY extension that allows clients & servers to operate entirely without mes…

> You can send lots of requests to a server and you have to tag them so you can match them up with responses later Yes, you can match the final OK/NO/BAD responses with the origina…

Most of mox is written with acme (also some vim)!

> multiple separate components Btw, I don't think it's better to have separate _components_ as in separate software packages. Integrating this functionality into one software packa…

Yes, you can add domains, add accounts (which contain the mailboxes and messages), and configure addresses for the domains with accounts. So one account can have many addresses, at…

> because the updates and security fixes are managed by Debian. Once things are configured, I don't need to do anything using unattended upgrades This is a good point. It would be …

> (which may already exist) - I'd love to be able to use my external spamassassin with it instead of (or even in addition to) the built in one This isn't possible yet. For me, the …

> incoming emails didn't work from Microsoft but they fixed that in 0.13 Yeah, this one was interesting. It looks like microsoft updated their TLS stack to TLS 1.3, but incorrectly…

No, that won't work. The webmail uses a simple custom protocol. Perhaps someone can rewrite it using JMAP in the future...

> this allows those spam checks which will still work to benefit from the normal delivery path. It's not exactly the same. When a backup MX has accepted the message, it takes respo…

> I didn't find anything about sub-addressing in the features list. Is it a supported feature? Yes, assuming you mean addresses like user+ @domain. The "+" is configured by default…

From a security perspective, it is better to have separate & isolated processes (but written in modern languages that provide safety). Mox is currently a single process handling al…

Hi Bron! Thanks, JMAP will come at some point too! (: Someone has already been working on JMAP support in mox. I'm currently in a refactor of the storage layer, keeping history of …

The looks match the intended audience. (: I'm focusing on functionality/protocol support now. User/admin-friendliness and making it more attractive will come later. Mox will become…

Seems reasonable. I have been thinking about schemes for backup mx'es. When the primary is online, the backup would just forward the smtp connections to the primary directly. The b…

I'm hoping to make this easier in the future, more often automatically taking care of updates. In the past, you've had to run a command/script here or there to fix up date, but tha…

> Does mox support antivirus addition No, not currently possible. I think it needs milter-like functionality in the smtp server. Would be good to have eventually.

There is some more information about spam filtering at the features page: https://www.xmox.nl/features/#hdr-junk-filtering I'm very happy with how the filtering works for me. Most …

1. no 2fa in the webmail yet. work is currently underway at the ietf for standardizing chained SASL (auth) mechanisms, and passkeys. i want to look at implementing passkeys already…

I browsed through the article, but it's not clear to me if they're only encrypting data at rest (that you open up with a login session, but then: their referenced docs mention alic…