I wrote on the subject some years ago:
http://yalis.fr/cms/index.php/post/2014/01/31/Why-buy-a-domain-name-Secure-mail.
This may interest you.
I am in the process of setting up a newer configuration, all with Ansible,
among which are Exim and Dovecot, with real users and virtual users, and
Peter Hutchison via Exim-users (Mo 09 Apr 2018 15:24:54
CEST):
> Has anyone implemented any of the following on their mail systems? StartTLS,
> DMarc and DKim.
STARTTLS I'd see as a must nowadays.
Problems can arise if you have MUAs connecting to your server and your
Hi Peter,
It's actually not quite complicated. DMARC comprises SPF and DKIM.
It's more of publish the two records and configure Exim to sign outgoing
mail. It's pretty easy if you have complete control of your DNS servers.
So here are three links that will demystify the whole thing for you:
Has anyone implemented any of the following on their mail systems? StartTLS,
DMarc and DKim.
I would just like to any tips, gotchas, downsides or other useful information I
should know?
Peter Hutchison MCP
Senior Network Systems Specialist
* 01484 473716
Networks Team
University of