Single comment thread
See full discussion

Agree with the others; some additional things;

  1. I think your website is pretty good. You could probably make it a little simpler though.
  2. simpelogin.co only has a single MX; it's hosted in AWS. a) single MX = bad practice, even if mostly ok b) AWS IPs generally are shit for mail servers.
  3. your DMARC record has some minor errors - mxtoolbox.com/problem/dmarc/d…
  4. you must be breaking dkim signatures; as you're modifying and forwarding a (now) usually signed email; is there a way you've got around this?
 Reply
Son Nguyen Kim
@son

Hi Russel, thank you a lot for the feedbacks 🙏!

  1. Could you give more details please? I'm taking any suggestion to make the website more accessible (even to non-geek people)!

  2. I use AWS mostly for their S3 and RDS. Do you know which cloud provider who might have "cleaner" IPs? The current IP is clean for almost a year now but some users still report SimpleLogin emails falling into their Spam folder so I suspect the IPs might be the culprit here 🤔.
    Adding a fallback server has a high position in my todo list! Once the second server is ready, I'll add a second MX record :).

  3. Fixed :)

  4. The "trick" is when an email is forwarded through SimpleLogin, I remove its incoming DKIM signature (after verifying it) and replace by the SimpleLogin one. So outgoing emails are DKIM-valid.

 Reply
  1. Just shorter and simpler would get me to try it. If you're giving away accounts, maybe you could do the whole signup over email?
  2. Ya; it's hard - just check your ip / block in blacklists. You can build reputation by getting folks to take the messages out of spam.
  3. cool
  4. ya, so still the problem is that I have to trust the message is un-tampered with inside your infra.
 Reply
Son Nguyen Kim
@son

1)) By "signup over email" you mean the passwordless login over email? I thought about this one before and am not 100% convinced about it yet ...

4)) Yes I know that it's hard to trust the system :), that's why I planned for SimpleLogin to be open source from the beginning. For now, users still need to take my word for it ...

 Reply
Home
Search
Messages
Notifications
More
You need to sign in or sign up before continuing.