What’s up, what’s down and what are you not sure about?

Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.

  • tburkhol@lemmy.worldEnglish
    5·
    4 days ago

    It kind of amazes me that, in this day and age, email has turned out to be the lynchpin of security. Email as a 2FA endpoint. Email password reset systems. If email is compromised, everything else falls. They used to tell us not to put anything in email that you wouldn’t put on a postcard…how did this happen?

    • dan@upvote.auEnglish
      2·
      3 days ago

      That and email protocols are outdated and aren’t too secure. For example:

      • Neither SMTP nor IMAP have no way to use two factor authentication.
      • Spam blocking is so hard because SMTP was not designed with it in mind.
      • SMTP has no way to do end-to-end encryption which is why you need to layer things like GPG on top.

      IMAP has a modern replacement in JMAP, but it’s not widespread. SMTP is practically impossible to replace since it’s how email servers communicate with each other.

      The “solution” has been for companies to make their own proprietary protocols and apps, for example the Gmail and Outlook apps combined with a Gmail or Microsoft 365 account respectively.