CIRCLE WITH A DOT

@bobbricoleur For email encryption standards, it is PGP or S/MIME. Generally you only do the key generation once. A 2048 bit RSA key takes only a second or two to generate these days.

@noplasticshower I self-host with Dovecot 2.3 + Postfix on a VPS.No issues with TLS so far — using Let's Encrypt with SNI for multiple domains. SPF/DKIM/DMARC all set up with hard fail. Deliverability has been surprisingly good. Honestly the hardest part was getting the PTR record right with the hosting provider. Once that matched, everything was ok. What TLS issues are you seeing on 2.4? Curious before I upgrade.