From 56e296e5875b10ed053cbdedbab08957fce2a461 Mon Sep 17 00:00:00 2001
From: Gab <24553253+gabrix73@users.noreply.github.com>
Date: Sun, 16 Aug 2026 19:24:16 +0200
Subject: Harden Usenet threading and ingress delivery

---
 README.md | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'README.md')

diff --git a/README.md b/README.md
index 745c373..da2acb2 100644
--- a/README.md
+++ b/README.md
@@ -120,6 +120,9 @@ The ingress is installed separately from `deploy/yamn-nym-ingress.service`.
 Its environment file must contain the reviewed current YAMN Entry allowlist.
 Public YAMN exits deliver to the clearnet Mail-to-News endpoint; they must not
 be configured with an Onion-only destination they cannot resolve or reach.
+The ingress retries transient Tor connection failures only before beginning
+the SMTP transaction, avoiding both immediate message loss and unsafe retry
+after an ambiguous SMTP handoff.
 
 ## Delivery semantics
 
@@ -136,6 +139,8 @@ Nym payloads in logs.
 ## Security notes
 
 - All form input is validated before encoding.
+- Usenet `References` accepts a bounded chain of Message-IDs and generates
+  `In-Reply-To` from the last ID; `Reply-To` is validated as an email address.
 - The YAMN encoder reads only the local reviewed public keyring.
 - The Nym recipient and Mail-to-News address are deployment configuration,
   never browser-controlled destinations.
-- 
cgit v1.2.3