Threats
Dangerous Attachment Types: Executables, Macros, Archives and Disk Images
Some attachment types run code or hide it from scanners. Here is why attackers use them and how to handle each category.
read >
Privacy
How Long to Keep Email: Retention Habits and the Risk of Old Mail
Old mail carries growing risk through breaches, forgotten accounts and archived secrets. A practical retention approach for personal email.
read >
Guides
Choosing a secure mail client
What to look for in a secure mail client: TLS checks, remote content control, PGP support, server-side filtering and updates, with a comparison.
read >
Threats
Account Recovery: The Weak Link in Your Mailbox Security
Recovery flows often let a weaker method override strong login protection. Here is how they fail and how to harden them.
read >
Privacy
Email tracking pixels and how to block them
How tracking pixels and link redirects reveal opens and clicks, what Apple Mail Privacy Protection changes, and how to block them.
read >
Email authentication
MTA-STS and TLS-RPT explained
What MTA-STS and TLS-RPT do for SMTP encryption, how the policy and reporting records are published, and the mistakes to avoid.
read >
Operations
Spam Filtering Without Profiling: Greylisting, Reputation and Content Rules
How inbound spam filtering can work with greylisting, sender reputation and content rules while keeping per-user behaviour out of the decision.
read >
Guides
A Mail Security Checklist for Small Teams
A practical checklist for a small team's mail setup, covering accounts, domain records, filters, keys, offboarding, backups and a regular review.
read >
Threats
Hardware security keys vs TOTP codes
Why TOTP codes can be relayed by phishing sites while FIDO2 security keys are bound to the origin, and how to use both on a mail account.
read >
Privacy
Why we don't scan your mail
Why a mail host should not read your messages, where encryption at rest stops, and what limited inbound filtering actually involves.
read >
Guides
Reading email headers
How to read Received, Authentication-Results, DKIM-Signature and other email headers, in order, and which ones you can trust.
read >
Operations
Self-Hosting Versus a Small Hosted Email Provider: An Honest Comparison
Running your own mail server offers control and carries real operational work. This comparison covers deliverability, security, upkeep and cost, so you can.
read >