[Chapter-delegates] Very safe email from the Chapter Community Tools project

[Alexander Blom]

Dear all,


As you all know the Chapter Community Tools project has been working hard
on making a real difference, together with a number of open source projects.
Good news: as a new service from the Chapter Community Tools project we
offer the participating chapters (that could be your chapter!) secure hosted
emailboxes that strive to be 100% compliant with modern email standards
such as DKIM, SPF, DMARC, StartTLS (with TLS 1.2), POP3, IMAPS and more.
Shortly we intend to also provide DANE/TLSA records, webmail and email
lists. Note that we offer this as a beta currently, as we are still ironing
out issues.

So if you are embarrassed that you have to exchange email with your chapter
members from a 'free' email account that makes you and the chapter look
unprofessional, does not adhere to internet standards and also infringes on
your members' privacy? Did you run the email test from internet.nl and saw
the possibility to improve your security - but were uncertain how? Do you
want to "practise what you preach" when it comes to supporting modern
internet standards? Then, jump on board!

There are a number of convenient tiers, depending on how much you want and
can do yourself:

Mail under internetsociety.info
-------------------------------

E.g.: chaptername at internetsociety.info

You get a secure mailbox to use for incoming and outgoing mail from your
chapter, which you can optionally share with multiple officers within your
chapter. There is no need for any technical infrastructure at your end. All
you need to do is configure your email client. We provide SRV records (RFC
XXX) so this is done almost automatically.

Dp you want to make use of this? Send a very safe mail to
michiel at internetsociety.info with your chaptername (or your own name) and
we will send you the configuration instructions and take care of the rest.


Mail under your own chapter domain name
---------------------------------------

(This can also be a subdomain of your chaptername)

E.g. board at chaptername.tld, president at isoc.tld, 会長@board.isoc.tld

We can provide aliases (soon with SRS) or full IMAP/POP3 mailboxes for your
officers and project teams.

If you want to use the hosted service, you will need to add a record to
your DNS that points to toolkit.internetsociety.info.

Do you want to make use of this? Send a very safe mail to
michiel at internetsociety.info with what you would like to do and we will
send you the configuration instructions and take care of the rest.


Self Hosted
-----------

Of course the whole idea is that you can set this up yourself, and teach
others how to do it. The chapter toolkit contains some pretty unique
technology, and greatly simplifies setup and maintenance through three
related open source projects - Nix, NixOS and Nixcloud webservices. Nix
offers declarative package management, reproducible builds, atomic upgrade
and many more wonderful features.

All you need to run email on your own trusted infrastructure is access to
some real or virtual hardware. We are looking to support ARM (e.g.
Raspberry Pi), Risk V and other setups later on. First you install NixOS,
and add the Nixcloud Services and our declarative configuration.
There is a single text file in which everything is managed. You change the
domain name to yourdomain.tld, configure the IP addresses, add the accounts
you want and run. It will automatically retrieve certificates (if you have
your own certificates which you want to use, you can of course use those).
There is some documentation with Nixcloud webservices, and we can offer
best effort support in setting this up.
If there is interest, we can see if we can use Nixops (yet another related
project) to install.

Do you want to make use of this? Send a very safe mail to
michiel at internetsociety.info with what you would like to do and we will
help you along.

Our goal to provide the technically most advanced and modern internet
infrastructure we can. If you have *any* technical remarks or suggestions
how we can further harden our setup or make improvements, please let us
know. Or better: join us and help to make the internet belong to everybody
again!


More coming
-----------

Note that we are working hard to provide you with more internet goodness,
either conveniently hosted or self-hostable. This includes SIP, XMPP,
WebRTC, and much more. Watch this space.

Best,

On behalf of ISOCNL
Michiel Leenaars
Alexander Blom
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://elists.isoc.org/mailman/private/chapter-delegates/attachments/20180212/77876f38/attachment.htm>