self mail hosting

[Baruch Siach]

Hi Efraim,

On Sun, Jun 08, 2014 at 05:58:50PM +0300, Efraim Flashner wrote:
> On Sun, 8 Jun 2014 17:47:18 +0300
> "E.S. Rosenberg" <esr+linux-il at g.jct.ac.il> wrote:
> 
> > 2014-06-08 14:22 GMT+03:00 Efraim Flashner
> > <efraim.flashner at gmail.com>:
> > 
> > > using netvision's smart host shouldn't change my from or reply-to
> > > something at netvision?
> > >
> > No, as long as you are an authenticated user it should pass whetever
> > mail you want, it may or may not be flagged as 100% trustworthy since
> > it won't be your "official" smtp server, but you may be able to set
> > policies that declare that it is a trusted origin server. (
> > You can for instance also send you @gmail mail through a smarthost,
> > but it will result in a warning showing in gmail that the mail may
> > not be from the person since the mail came from a non-google smtp
> > server. Also note that the smart host will most likely not use TLS for
> > communication between smtp servers (it may use it for you>smarthost,
> > depending on how good your ISP is), but you would anyhow only be able
> > to do that if you are willing to shell out the required money to get
> > a signed certificate (self signed is nice for testing but 3rd parties
> > will never accept them [as they should]).
> 
> I have my certificate signed by CACert, but if that doesn't look like
> enough then I'll probably decide if it's worth it based on the price.

CAcert's certificate are not generally trusted (see 
http://lwn.net/Articles/590879/). A free alternative is StartCom's StartSSL. 
See 
http://arstechnica.com/information-technology/2014/03/taking-e-mail-back-part-2-arming-your-server-with-postfix-dovecot/ 
for a detailed description.

baruch

-- 
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -