Operator notes on Cloudflare-native email.

Long-form writing about self-hosted email in D1, Workers-native routing, the REST API, and the parts of the platform that show up in the security review.

Email webhook on Cloudflare Workers — HMAC, retries, idempotency

Receive email events in a Cloudflare Worker: HMAC-SHA256 signature verification, retry schedule, idempotency key (SMTP Message-ID), and the failure modes that catch teams out.

Read the post →