Greg Slepak

Could this be because my Junk folder is in `INBOX.Junk` instead of `Junk`.... ? If so, how do we get it to check both?

har har

K, note that the trash equivalents must be added too (and case sensitive??? Ick).

Thanks for the tip @PiPeep! I'll let you know if it seems like it's working or not.

@PiPeep I'd like to say that it's working, but I still can't be sure. It _is_ catching some spam (less than Apple Mail.app though), and I'm not sure if it's...

I think it won't work because of [this](https://github.com/taoeffect/empress/blob/5ece50d0853cccfca1071218b2c6b2dc2d0edf79/roles/mailserver/files/etc_dovecot_conf.d_10-mail.conf#L90-L93) in the config file: ``` mailbox Junk { auto = subscribe special_use = \Junk } ``` See that `special_use`? It only references...

Note also that StartSSL supports only one free subdomain per domain per certificate, however they do not restrict the number of certs you create, so it's effectively a free wildcard...

Am reading the following: - http://www.postfix.org/TLS_README.html **See especially _" Secure server certificate verification"_ section** - https://serverfault.com/questions/583739/startssl-com-ssl-class2-certificate-and-postfix It's looking like this might have to be done completely through the `alt_names`, but...

In that [first link](http://www.postfix.org/TLS_README.html) they say that Postfix doesn't support SNI. We'll need to evaluate whether the workaround they mention is acceptable. If it's not we will have to ditch...

Err, OK, skimming it a bit more closely, that stuff is only relevant when you're actually doing TLS authentication, which our current level `may` does not do. At the [verify](http://www.postfix.org/TLS_README.html#client_tls_verify)...