Comment by bluGill
10 years ago
Because I have interests other than running my own email server. I am capable of running my own email server. I'm also capable of taking my own garbage to the dump every week. I'm capable of removing my own appendix if that is required (under self administered local anesthesia). I hire those things done because I have better things to do with my time. I got tired of keeping up with the latest anti-spam best practices. I can pay someone $15/month to make the weekly trip to the local dump saving me an hour every week (I believe the dump charges a dumping fee as well which makes the math more in my favor). I can pay someone else to go to medical school thus saving me the time it takes. I would rather play with my kids, and if I can ever get them to sleep I have plenty of other things I enjoy doing.
FastMail is a cheap and easy option to email. They provide some services that I value over what free accounts have. It is a compromise, but everything is. I freely admit that I was failing at administering my own email servers: I never did get some anti-spam thing in place so a few domains rejected everything I sent. I got about 100 spam messages in my inbox every day (my filters caught 3 for each they let through). With Fastmail everyone accepts my email, and I get about one spam message a week which I can handle.
> FastMail is a cheap and easy option to email.
So is spinning up a docker container with this all already configured... I just don't see the argument I guess, it's just too easy to do yourself. Instead you're getting ripped off and losing privacy. There's no reason to believe fastmail is any more private than GMail, staff can just as easily read and deliver your mail to whomever they please.
A medical degree takes years to get, this takes 10 minutes for a basic setup, an hour or two for a more advanced one, assuming you're in the industry already and know your way around.
And ensuring it stays running and updated and secure and backed up. Docker isn't magic. A server instance and the associated apps still need to be maintained. And you're either trusting the creator of that Docker image or digging into every security setting anyway.
Updated is usually barely a problem, there hasn't been a serious postfix vulnerability since 2011 or a dovecot one since 2013 (and even the 2013 one wouldn't necessarily affect you as an individual user). One update every 3-5 years is not exactly something I'd call a problem. I don't update unless there's a major vulnerability and it's one I'm affected by.
Rebuilding your docker when you hear about that is not exactly something I'd consider a big deal, but I guess if 2 minutes work every 3 years is worth giving away your privacy, then you do that.
Backup is a set and forget cron job (tarsnap mail dir), so I don't see how that's an issue.
6 replies →
Native two factor auth (like U2F integration) alongside mobile apps would be the big ones.