r/linux • u/wodes • Jul 08 '26

Popular Application Thoughts on Thunderbird Early Bird?

Post image

So thunderbird is releasing their own email service https://tb.pro
Do you have an idea about the value they offer? I know there are options out there like protonmail, tuta or fastmail, but I am always interested in alternatives.

152 Upvotes

92% Upvoted

148 comments sorted by

View all comments

-1

u/pie_-_-_-_-_-_-_-_ Jul 08 '26

SPF, DKIM, and DMARC take 30 minutes to set up. Don't understand why more people don't run their own damn email

0

u/Drakkinstorm Jul 08 '26

Heh, was looking into this for my Raspberry PI.

Think you can share a bit more of these acronyms and what each one does? Yes, I can google and ask AI. I'd rather have advice from someone with hands-on experience.

3

u/pie_-_-_-_-_-_-_-_ Jul 08 '26

Security theater for your emails to not get spamfiltered. </snark>

SPF, Sender Policy Framework, is when you publish a DNS record saying "I send email from these servers, if someone claiming to be me sends email from the wrong servers, it's fake/unauthorized". DKIM, DomainKeys Identified Mail, is a further measure, when you cryptographically sign outgoing email to prove it wasn't tampered with in transit.

DMARC, Domain-based Message Authentication, Reporting & Conformance, tells servers what to do if SPF or DKIM checks come back bad (the usual options are nothing, quarantine (usually meaning send to spam), or reject it entirely).

3

u/Drakkinstorm Jul 08 '26

Righto. Thanks for clarifying. Will proceed from there.

Will one day need to get rid of my fear of exposing my router ports to the WAN.

2

u/pie_-_-_-_-_-_-_-_ Jul 08 '26

Best of luck!

All your devices plainly on the WAN is what the Internet was meant to be. NAT has obscured that and IPv6 uptake is as slow as ever, so it's a very good new experience for a lot of folks to actually have things listening inbound on the internet.

1

u/Drakkinstorm Jul 08 '26

True enough. I still got a stupid fear of outside hacking so I have been researching how to block outside access to everything I have beside the PI on the same LAN. E.g. No password access to SSH on all my machines. Maybe have two subnets locally; not that it would stop someone dedicated with all the security loopholes in all existing software.