From 94a140a27ad892a3542f5fe4aec27a973ef4a757 Mon Sep 17 00:00:00 2001 From: Joshua Tauberer Date: Wed, 18 Jun 2014 23:04:06 -0400 Subject: [PATCH] linkify README --- README.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index c53a83b3..9fa86272 100644 --- a/README.md +++ b/README.md @@ -13,14 +13,14 @@ The Box Mail-in-a-Box turns a fresh Ubuntu 14.04 LTS 64-bit machine into a working mail server, including: -* An SMTP server for sending/receiving mail, with SSL/TLS required to protect your password, opportunistic TLS to prevent mass surveillance, and greylisting to cut down on spam (postfix, postgrey). -* An IMAP server for checking your mail, with SSL/TLS required to protect your password (dovecot). -* A webmail client over HTTPS so you can check your email from a web browser (roundcube, nginx). -* Spam filtering right to your Spam folder (spamassassin). -* DNS pre-set with SPF and DKIM to prove to recipients that your email was from you (nsd, opendkim) --- the machine acts as its own nameserver to automatically set this up. -* DNSSEC and DANE TLSA to force cryptographically-secure communications in certain cases, especially between Mail-in-a-Boxes. +* An [SMTP server](http://www.postfix.org/) for sending/receiving mail, with STARTTLS required to protect your password and [opportunistic TLS](https://en.wikipedia.org/wiki/Opportunistic_encryption) to prevent mass surveillance. +* An [IMAP server](http://dovecot.org/) for checking your mail, with SSL/TLS required to protect your password. +* [Webmail](http://roundcube.net/) over HTTPS so you can check your email from any web browser. +* [Spam filtering](https://spamassassin.apache.org/) that puts spam into a spam folder and [greylisting](http://postgrey.schweikert.ch/) to stop spam as it arrives. +* [SPF](https://en.wikipedia.org/wiki/Sender_Policy_Framework), [DKIM](https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail), and [DMARC](https://en.wikipedia.org/wiki/DMARC) to prove to recipients that your email was from you --- the machine acts as its own DNS nameserver to automatically set this up. +* [DNSSEC](https://en.wikipedia.org/wiki/DNSSEC) and [DANE TLSA](https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities) to force cryptographically-secure communications in certain cases, especially between Mail-in-a-Boxes, if you add "DS" records to your domain registration. * Configuration of mailboxes and mail aliases is done using a command-line tool or an HTTP-based API (accessible from within the server only). -* Basic system services like a firewall, intrusion protection, and setting the system clock are automatically configured (ufw, fail2ban, ntp). +* Basic system services like a firewall, intrusion protection, and setting the system clock are automatically configured. This setup is what has been powering my own personal email since September 2013.