Followup to email

One thing that's actually quite important but is easy to forget is reliability.  When I lose contact with the mail server, I need to fail gracefully.  If I can't contact the server because the machine is offline, I need to take appropriate action.  Under no circumstances should things just crash or die.

There's probably a principled way of approaching this as a design goal, but I don't know precisely what it is.