Which email provider handles your municipality's official communications?

[flberger@nerdculture.de]

@larsmb

Oh wow, that's actually not too bad.

[chake@chaos.social]

@larsmb @soverin @jwildeboer what a great project. Seems like I'll have to ask some questions in our Rathaus.

[huopa@mastodon.online]

@larsmb @soverin @jwildeboer hey, this made my day! Germany has apparently had quite a few it wizards able to setup their own mail systems.

[stiiin@infosec.space]

@Roodbaard @soverin The map just shows what's visible on the outside. "Independent" in this case means that Den Haag itself owns the IP addresses of the email server. Apeldoorn's email server has an IP address owned by VodafoneZiggo B2B NL. It says nothing about if and how email is routed after it's accepted.

Besides, it's plausible that those municipalities have a Microsoft 365 subscription, because there are "Microsoft Online Email Routing Addresses" (MOERA) with the names denhaag.onmicrosoft.com and apeldoorn.onmicrosoft.com. It's not rock hard proof (those MOERAs could point to tenants belonging to anything else than those municipalities, and they could even be alias MOERAs, and there are licenses that don't really include Outlook 365, and you don't have to route your email through Microsoft 365, etc.), but it doesn't bode well.

If you look at public records, you can see that Den Haag acknowledges its infrastructure is Microsoft-based (see section 5.4 of https://denhaag.raadsinformatie.nl/document/16421637/1 on page 40), and Apeldoorn reports that they're integrating Copilot into their email software (see the paragraph on "Kunstmatige intelligentie: kansen verantwoord benutten" of https://apeldoorn.parlaeus.nl/vji/public/postin/action=showdoc/gd=2a8880888a8a20a002a20a08e3f23646/Raadsbrief_iVisie.pdf on page 3).

[sonjavan62@mastodon.nl]

@vosje62 was idd een fijne stad om te wonen, goede herinneringen aan (ik was een puber toen) @soverin

[Guest]

The Netherlands and Germany are leading the push for data sovereignty, with the EU setting the pace overall. We actually did something similar with African universities a few years ago.

You must have already imagined which Big Tech providers lead and where such data eventually reside, so no need to revisit the details.

[wrdlbrmpft@social.tchncs.de]

@larsmb @soverin @jwildeboer Berlin: MS Exchange

[johan@social.codefor.nl]

@soverin ik zou alleen niet mn eigen huisstijl kleur op Microsoft plakken

[hbauer@social.caserio.de]

@larsmb @soverin @jwildeboer hm. incoming email provider does not mean "email" provider. in a lot of case there is office365 behind the server in mx record

[jelv@mastodon.nl]

@soverin when you want a clickable link you have to add https:// in front. This doesn’t count for your message limit.

[joshua@mathstodon.xyz]

@samuel Doesn’t really matter if there is a redirect, right? Also the site doesn’t use cookies so there isn’t even any private information in the request anyways.