Michael Kuron

A long time ago, I wrote a MunkiServer Importer for AutoPKG: https://github.com/mkuron/autopkg-recipes. It's really basic and due to lack of an API, it does screen-scraping, but it works. I used...

Therre was some discussion at https://github.com/mailcow/mailcow-dockerized/pull/2747 two years ago. At the time, MTA-STS didn‘t make sense for Mailcow because it was barely used anywhere, and DANE, which we do have,...

Agreed, the implementation there wasn‘t perfect, but my comment was about the discussion of MTA-STS vs. DANE. At that time, nobody was able to point me to a mail server...

> I scanned a list of big companies, and as much company bigger then less DNSSEC enabled domains I see. I have never heard a convincing reason why one wouldn‘t...

Good idea. According to https://wiki.gnupg.org/WKD there is some client support for this already. It‘s not an approved RFC yet, but that will probably happen soon. An implementation in Mailcow could...

The advantage of the SRV method would have been that it would not have required an additional subjectAlternateName in our TLS certificate for every domain. Now you will need to...

> Not everyone uses it, but it can help raising awareness, as the MUA may show a message about it. It's probably not going to help with that as MUAs...

That would indeed be quite nice. Unfortunately, SOGo does not have access to your mailbox while you are not logged in (it does not know your password), so it wouldn't...

Kerio probably has a tighter integration between the calendar backend and the mail server, similar to Exchange and Gmail. For us the backends are completely separate, the mail server does...

That means we need a configuration option where users explicitly have to turn on ECDSA. I was hoping to avoid that (we have enough such options already), but there is...