Postfix keeps running even if one Postfix process dies; Windows requires that someone restarts the service.

In a previous life I wrote the software that controlled my physics experiments. That software had to deal with all kinds of possible failures in equipment. That is probably where I learned to rely on multiple safety nets inside and around my systems.

Coming back to the topic of computer security, the TCP Wrapper is an example of such a safety net. I wrote it when my systems were under attack by someone who appeared to walk through walls.

I want to avoid locking people into solutions that work only with Postfix. People should have a choice in what software they want to use with Postfix, be it anti-virus or otherwise.

The Postfix security model is based on keeping software simple and stupid.

Adding functionality is not just a matter of adding code.

For many people my software is something that you install and forget. I like to keep it that way.