I have enabled allow all attachments for group messages
to make sure I can receive all attachments sent from external users. That’s working fine
There’s one exception I’d like to see: I think Discourse should always silent strip the smime.p7s attachment if it exists – that is an S/MIME siganture, not a real attachment. Otherwise, many posts look like this: