Defence blues
MTA-STS configuration
Red tradecraft
Privacy greenhouse
Purple crossroads
Indigo observatory
Contact
Initializing search
Defence blues
Blue team @Purpleteaming
Blue team @SOC
Blue team for dev
Blue team @Home
Bulletproofing servers
Bulletproofing servers
The wake-
up call
Hardening Linux server
Hardening webserver
Smarter mail servers
Smarter mail servers
Types of mail servers
Securing Postfix:
MTA & SASL authentication essentials
DNSSEC:
Better than nothing, but not a silver bullet
Securing email transport:
TLS, DANE & MTA-
STS
Securing email transport:
TLS, DANE & MTA-
STS
The Problem with STARTTLS:
A Flawed Upgrade
TLS configuration
DANE configuration
MTA-
STS configuration
SPF:
The first line of defence against email fraud
Domain Keys Identified Mail
(DKIM)
Domain-
based Message Authentication, Reporting and Conformance
(DMARC)
Golem Trust Computing Ltd.
Department of Silent Stability
The Home for Bewildered Beasts of Legend
Stormforge training grounds
Honeytech for humans
MTA-STS configuration
ΒΆ
Introducing MTA Strict Transport Security (MTA-STS)
Back to top