MTA-STS (Mail Transfer Agent Strict Transport Security) on Zimbra "Starter" e-mail account

Hello,

Are you sure that all sending and/or receving servers are capable of/configured for checking and enforcing your STS policy, if you defined any ?

What sort o question is this ;)
(Just because IPv6 is not so widespread there is no need to implement IPv6 ... mentality)?

Many of the home run actually are .... few major ones do so as well.


If there is a protocol (MTA-STS) why not to support it?
(How many man hours will it take for giant like OVH to get it implemented)?

There is 16k Amazon employees looking for work now

https://www.theregister.com/2026/01/29/amazon_layoffs/

MTA-STS implements an additional layer of security. There is always a chance that implementing it could make intercommunication inoperable and down times.

A general-purpose provider such as OVH doesn't require such high-level server authentication. They need to have the e-mail workflow working reliably.

What is your interest in complaining here ?

You are absolutely right = If It Ain't Broke, Don't Fix It mentality will not innovate,

(there could be a switch [MTA-STS] to turn it on or off again ;)
it would be nice to have a choice ....

There is always something broken with OVH :(

https://www.uceprotect.net/en/rblcheck.php?ipr=94.23.152.220

https://www.uceprotect.net/en/rblcheck.php?ipr=188.165.6.20

ok, then build your own mailserver with all bell ans whistles, and stop complaining here.

Moreover you are pledging allegiance to the worst crooks on the planet. (uceprotect)

Read about this:
https://www.reddit.com/r/sysadmin/comments/eur4ju/removal_from_uceprotectl3_blacklist/
https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html
https://www.trustpilot.com/review/www.uceprotect.net

I have running several instances of Mail-in-a-Box (MIAB) that are hosted

on several small VPS services (that ware willing to set up PTR record for assigned IPv4/6).

None of them has ever had a problem with UCEPROTECT-Network.

The fact that the Zimbra "Starter" 15GB E-Mail account is FREE and finally has 

implemented DKIM is great, MTA-STS implementation and option to either

enable it or turn it off (or run in "testing" rather then "enforce") would be also great.
(GitHub Pages, CloudFlare Workers)??

Looking at OVH, is not much better
https://www.trustpilot.com/review/ovh.ca

https://www.trustpilot.com/review/ovh.com/fr

https://www.trustpilot.com/review/ovh.it

https://www.trustpilot.com/review/ovh.pl

If anyone finds a way on how to "enable"  MTA-STS on the Zimbra "Starter" 15GB E-Mail account

please share.

As of 2026/02 it is not possible to do so AFAIK.