Recent searches
Search options
Administered by:
new security milestone reached: #chatmail relay servers are hardened to only transfer end-to-end encrypted e-mail with metadata minimization. No cleartext message can enter or leave the secure chatmail network anymore.
We now talk about "chatmail relays" rather than servers as they only ephemerally store messages until delivery. Dirt cheap to run.
We opened up our #rust "chatmail core" infrastructure library and set up an overview of the community driven ecosystem ...
@sbb@c.im@delta Can geoblocks be set up to stop signups from certain countries? Like if there were one or two countries, or IP ranges where I didn't want to allow signups from them, could I do that? I would still accept email from any IP for relaying purposes. Just signups - new local account creation - was restricted.
@sbb @delta be careful about what you want - the conflict that matters is not between countries, but between those above and those below. Excluding users by IP address is not very wise - I'd rather make technology possible which discourages organized violence and enables escape, trust, and intimacy.
@compl4xx @delta A lot of flooding of open Web services is happening these days by bots, wasting lots of bandwidth and CPU. Bots downloading the same web assets tens of thousands of times. It's a "bad-faith" wastage of the free services offered. Party poopers must eventually show up to any wide open party, and foul it, if possible. Blocking Alibaba cloud's IP range stops about 80% of these bots - for now.
Allowing free and easy account creation on a #DeltaChat/Chatmail server provides a similar bad-faith "opportunity" for such party-pooper wastage of disk IO, disk space, CPU, etc - creating a huge number of free accounts, but not using them. So that's why I would want to know how to do such Geo-blocking/IP range blocking upfront - having seen what bad-faith bots are up to these days.
@sbb blocking IP addresses temporarily or for longer, can probably just use standard firewall rules. It's particularly the SUBMIISSION and IMAP ports you could try to block and probably HTTPS. This would still allow SMTP-relaying (incoming messages etc.). Requires research and trying out a bit. From our side, we are rather trying to make relays resiliently available (you can also connect via HTTPS port and ALPN to imap/submission btw).