- set up mail forwarding from existing tutor emails to personal emails (one-way)
- disable dnssec on google domains
- unlock google domain
- transfer to porkbun via ui with google domains token; approve transfer on google domains
- clone 53hor.net DNS records into porkbun domain
- turn on dnssec for porkbun domain
- turn on ssl certificate generation for porkbun domain

now every tutor needs manual action to be able to send mail again

every tutor needs to generate a password and submit the encrypted password to carpenter tutoring. this secret exchange still needs to be worked out

whether configuring gmail alias or setting up another mail client, steps are the same as before but the imap and smtp settings need to be changed

mta: mail.53hor.net
starttls for all ssl settings
143 for imap
587 for smtp
username is @carpentertutoring email
password is TBD

also the homepage mailer needs to be updated, preferably with its own email address which goes back to amy