Ask HN: Best hosted alternative to Google Workspace for email?

Post by brewmarche » Sun, Feb 06, 2022, 1:54 PM UTC

upofadown wrote: post #238

brewmarche wrote: post #236

Earlier quoted context omitted.

I’m sorry I don’t get the part about DKIM. I thought the DKIM signature would only be valid if the signing SMTP server has access to the private key matching the Header-From’s domain’s designated DKIM public key. E: by valid I meant valid and aligned (according to DMARC), sorry

A sender can throw anything they want in the "From:" field and then sign it. The receiver does not have to agree. What would happen is that the receiver would see that the holder of the domain was different than the domain in the "From:" address and on the basis of bad "domain alignment" could reject the email. I now think that the DMARC stuff is a red herring and would actually help make the current mailbox.org beha…

Post by upofadown » Sun, Feb 06, 2022, 2:14 PM UTC

brewmarche wrote: post #241

upofadown wrote: post #238

Earlier quoted context omitted.

A sender can throw anything they want in the "From:" field and then sign it. The receiver does not have to agree. What would happen is that the receiver would see that the holder of the domain was different than the domain in the "From:" address and on the basis of bad "domain alignment" could reject the email. I now think that the DMARC stuff is a red herring and would actually help make the current mailbox.org beha…

Yes, lack of enforcement by mailbox.org on the Header-From when signing DKIM is the problem for DMARC IMO. It means I can’t trust a DMARC pass due to aligned DKIM. Mailbox.org’s servers have access to 4 private keys as far as I know. These (I mean the matching public keys) are stated in mailbox.org’s DNS records. If you send from an @mailbox.org address you trust mailbox.org to do checking on the Header-From when sig…

Post by brewmarche » Sun, Feb 06, 2022, 2:33 PM UTC

upofadown wrote: post #243

brewmarche wrote: post #241

Earlier quoted context omitted.

Yes, lack of enforcement by mailbox.org on the Header-From when signing DKIM is the problem for DMARC IMO. It means I can’t trust a DMARC pass due to aligned DKIM. Mailbox.org’s servers have access to 4 private keys as far as I know. These (I mean the matching public keys) are stated in mailbox.org’s DNS records. If you send from an @mailbox.org address you trust mailbox.org to do checking on the Header-From when sig…

The DKIM key is in your DNS. Does mailbox.org provide a DNS service and somehow enforce what you put in there? Added: Wait, how would that even work? You need to generate your own DKIM key.

Post by remram » Sun, Feb 06, 2022, 3:54 PM UTC

grepfru_it wrote: post #182

remram wrote: post #48

How is self-hosted email these days? Are there web-based email clients with search, filters, and labels?

Zimbra is the defecto mail solution for an integrated (mail calendar chat) solution. Horde is still the best solution for something completely FOSS. Outside of that there’s mailu which feels like a bunch of services flying in unison.. kinda like an old GM. All of this to say it’s not worth hosting your email because your smtp server doesn’t have any reputation. I had a mail server that never sent spam or junk mail, w…

Post by poxrud » Sun, Feb 06, 2022, 6:42 PM UTC

mdasen wrote: post #53

NetWorth16254 wrote: post #30

As alternative I would suggest Office365, but If you used Google workspace for so long, why not just pay Google? Why you have to change. Just pay and do nothing... They invested billions for you to use it for free so long. Its a good service.

Google Workspace is expensive: $6/mo for 30GB. Microsoft will give you 1TB plus the Microsoft Office apps (plus email) for that price. If you have a family of 6 with a custom domain, Google is going to charge you $36/mo while Microsoft will charge you $8.33/mo - plus each person gets 1TB of storage and the Microsoft Office apps. I think the reason to switch is that Google decided to use the same pricing that they wan…