jarland

No, I went straight to trying to shame them on Twitter. The part where I said "We’ve tried to talk. @Apple just stops responding once they realize what we’re asking" was just a joke, you got me.

There is no defined process for obtaining it. If you'd like to tear down that statement into little pieces and dissect it, I recommend getting a new hobby because it's not that interesting.

MXroute doesn't go around threatening US companies with EU law from Texas. As for your requirement for evidence, this situation does not require your approval unless you work for Apple and can offer some help in the matter. The tweet you are critiquing is me (owner of MXroute) attempting to gain Apple's attention to get what Fastmail and that EU user have obtained. I'll continue doing what I'm doing, if that's alright with you. I'm well aware of the situation and what others have done. What I need at this point is eyes on the prize. I'll get what I'm after, but a public statement that I currently cannot get what I'm after is entirely appropriate for the avenue I've chosen to do so.

It's a mistake to assume that I'm merely flailing my arms chaotically and generically playing the role of Karen.

Having friends inside of Apple that provide you with something no one else can obtain is a fairly decent definition of favoritism.

You cannot send Push notifications to the stock iOS Mail app no matter how hard you try. They can. There are functions inside of iOS that are made better because of this (auto copied 2FA codes, for example).

The stock Mail app for iOS does not support JMAP.

The stock iOS Mail app does not support JMAP and therefore it has no relation to Push notifications for the stock iOS Mail app.

This is exactly why we put this as a forbidden use case in the MXroute policy:

“Deceptive use against third party services by creating multiple email accounts to pretend to be multiple users of their service”

Because if you want to maintain a good reputation with people, you don’t facilitate people taking advantage of them.

It varies. It likely is an exaggeration for you, but for someone else it isn’t. It only needs to target a few domains to act as a DDOS. Rejecting invalid recipients reduces spam scanning overhead. It’s very significant at scale, for someone managing enough domains to see it.

The problem seems to be that while many domains don’t see this behavior, it seems random which ones do. Having the catchall in place when someone finally does target your domain like this seals the deal: Every one of the 16,000 recipient addresses that were accepted were just added to a list of working email addresses to be sold to spammers for the next 15 years. One hour to ruin your domain, and maybe it never happens to you, or maybe it happens to you tomorrow.

I’ve seen it go down like this at least a few hundred times in the last decade. Safe to say I’ve managed email for a few domains during that time. Enough to say it doesn’t happen to most people, but the ones it happens to usually end up having to disable their catchall or buy a new domain.

As an admin of shared mail servers you often have to base protections and actions on the worst of events, as those are the ones that threaten your infrastructure.

Feel free to open a support ticket about that and request that I evaluate any such 30 minute delays. If it’s the Friday server and you’re referring to inbound, mitigation has been applied while I work on the long term fix.

There's some good feedback in there and I appreciate it!

Whatever you decide, I'm here for you at MXroute and would love to have you on board. I understand your concerns and I wouldn't say anything to invalidate them, the burden of choice is yours and I'm merely here if you need me <3

I appreciate your recommendation. I'm no friend to intelligence agencies, but I don't want to necessarily put myself out there as a competitor to something like the old Lavabit. I'm not looking to be a victim of the US government any more than I want to see my customers victimized by them.

The problem is that a very significant number of email clients don't because it's not part of the open standards that they're implemented for.

It's a very tight line to walk, when I intend to offer these lifetime packages and run a company that outlives me. That's why you'll see the price rising on it. I'm trying to find the impulse buy threshold and exceed it to stay on mission. These plans can only fill small unused corners of already profitable servers. Anything more is irresponsible on my part.