Hacker News Reader

That isn't difficult to manage though, unless you consider running any server to be insecure. Use your distribution's MTA package and turn on automatic security updates. Done.

I would presume the moment an adversary gains control of the server, his first order of business is to disable things like that.

Unless they are too slow, then you get to pick up the pieces.

Since a server is a much juicier and visible target than any client, expect attacks.

> Since a server is a much juicier and visible target than any client, expect attacks.

Why do you think that?

Isn't a web browser that has access to your gmail inbox just as juicy as your self-hosted imap server?

I don't really see why a "server" would somehow be inherently a more interesting target. Google's servers, sure, they give you acess to billions of mailboxes, but your own private email server?

AFAIKT, "recently" in this case is 2012. There was something in 2014 but it was for a non-default experimental feature.

How is that different from any other type of server?