hannah commodore <hannah@tinfoilhat.net> writes:
Roundcube Webmail client 0.7.3 if you are concerned with security, I'd entirely avoid running roundcube.. I've had nothing but trouble with it
Ah, I didn't spot that part of the original post. I have a blanket ban on PHP for security reasons, so I never looked closely at roundcube or squirrelmail. I *did* find prayer. It's written in C, speaks HTTP/HTTPS to the front end (so no need for apache or fastcgi on the same host), and IMAP/IMAPS to the backend (so you *will* need dovecot). It's old-school enough that it works in proper browsers (like w3m) as well as fancy-pants bloaty ones. I can recommend it with the following caveats: - it has two themes. You want the newer, non-default one. - it's an OK fallback MUA, but you don't want to use it every day. - for some bizarre reason when I put it behind an apache reverse proxy (to do the LDAP auth layer), clicking on an attachment doesn't work. apache returns a 404 without even asking prayer for the attachment. The URLs look the same, so I'm completely stuck on that one.