I would like to enforce to encrypt a certain type of email. With MEMessageSecurityHandler, AFAIK, there is no way to enforce encryption as the encode method will be called when sender enable the encryption.

When the mail extension invoke allowMessageSendForSession func, the error prompt did not show the error description. What am I missing? Below is the code:     enum ComposeSessionError: LocalizedError {         case invalidRecipientDomain                  var errorDescription: String? {             switch self {             case .invalidRecipientDomain:                 return "example.com is not a valid recipient domain"             }         }     }          func allowMessageSendForSession(_ session: MEComposeSession) async throws {         // Before Mail sends a message, your extension can validate the         // contents of the compose session. If the message isn't ready to be         // sent, throw an error.         throw ComposeSessionError.invalidRecipientDomain     }

Hello, When my system DNS is set to DoH/DoT enabled DNS server i.e. 8.8.8.8 or 1.1.1.1, the NEDNSProxyProvider.handleNewFlow will not get called. What am I missing or is it the limitation? Also, the NEDNSProxyProvider.systemDNSSettings always return nil. PS: The network extension is running on macOS 13.3.1 (a)