Hacker Newsnew | past | comments | ask | show | jobs | submit | sam_lowry_'s commentslogin

I self-hosted for well over 20 years, I did not throw the towel and I do not plan to. Self-hosting is a sign of pride. Neither my government nor my Prime Minister nor even my Ministry of Interior or Foreign Ministry can host their own email.

Last time I checked, only State Security self-hosted.

I was probably lucky, but I rarely had delivery problems. The last one was a couple years ago with Microsoft swallowing my emails and it was due to the combination of a fairly old exim and a TLS certificate verification quirk at *.protection.outlook.com. I found a fix in the form of a configuration option somewhere on SO.

In all fairness, there is very little maintenance involved, and whenever I have to do maintenance work, I take the opportunity to learn something new. Like this year, I decided to finally replace my aging Debian jessie setup by Arch Linux, and I rewrote all cron jobs as systemd timers.

I must admit that when I send a really important email, I check the mail server log if it went off without errors, but this does not bother me as checking logs manually once in a while is a good thing anyway.

Lastly, a piece of advice: treat self-hosting like a hobby and learn to enjoy it.

Oh and the very last thing: the person who designed Exim configuration for Debian deserves a special place in hell for all the hours wasted. If you set up Exim on Debian, just figure out how to use the upstream exim config and adapt it to your needs.


> I must admit that when I send a really important email, I check the mail server log if it went off without errors, but this does not bother me as checking logs manually once in a while is a good thing anyway.

I also self-host my email. It would be very nice if there was some sort of notification system that alerted you if your email got bounced by the receiving server. A notification that fed through into Thunderbird would be marvelous.


Well I don't know if you wrote this in a sarcastic way or not, but when you write a new message in Thunderbird just turn on `Options -> Delivery Status Notification` and your mail server will email you back with a delivery status message (success or failure, although failure can take some days if the receiving server doesn't outright reject your message)

I was not sarcastic. I just tried this by sending from my gmail account to one of my other accounts. Didn't get any email back even though the email was immediately delivered.

ah sorry, I thought you wanted a delivery notification when you are sending an email via your own SMTP server (i.e. when thunderbird is configured to use your own outbound SMTP gateway)

All of the above! The only time I ever have to ssh into my self-hosted E-mail system is when something else upstream fails, like LetsEncrypt failed to renew my certificates, and I have to nudge that thing. Exim itself has been rock solid.

Sounds like most packages in the Debian ecosystem in my experience.

Just do yourself a favor and run Slackware.


I once worked at a top financial firm which had regular background checks from Pinkerton (yeah, that very agency from the books and with bad US history).

They sent me a questionnaire asking to fill personal details in a Word file while their email signature said not to disclose personal details over email.

Security clearance business is rotten to the core.


Israel?

Yeap.

"F-35I Adir: Israel’s Custom F-35 That No Other Nation Has" - https://www.19fortyfive.com/2025/04/f-35i-adir-israels-custo...

And the ultimate kicker...They got them for free, plus 2 Billion from US tax payers...While suckers Norway, Denmark, Italy who invested billions in the program development plus Netherlands etc...Have to pay for them.

https://en.wikipedia.org/wiki/Lockheed_Martin_F-35_Lightning...


prose


prosé


rosé


I hope to be the next Rothshild, give me a trillion!


European eIDs are knows to disallow encryption, only signature. If software like OpenSSL will starts to ignore intent... Good for us, the citizens.


AFAIU Let's Encrypt (ISRG) gets most of its money from Google, both directly and indirectly via Mozilla.

They do what Google says.


I believe the explanation. The collateral damage is huge, but Google couldn't care less.


> non-web-PKI reduces security

How exactly?


No. These are just certificates that happen to be used predominantly in HTTPS context and Google tries to tie them exclusively to the HTTPS context.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: