On 2012-12-31 22:28, trentbuck@gmail.com wrote:
hannah commodore <hannah@tinfoilhat.net> writes:
Roundcube Webmail client 0.7.3 if you are concerned with security, I'd entirely avoid running roundcube.. I've had nothing but trouble with it
Ah, I didn't spot that part of the original post.
I have a blanket ban on PHP for security reasons, so I never looked closely at roundcube or squirrelmail. I *did* find prayer.
It's written in C, speaks HTTP/HTTPS to the front end (so no need for apache or fastcgi on the same host), and IMAP/IMAPS to the backend (so you *will* need dovecot). It's old-school enough that it works in proper browsers (like w3m) as well as fancy-pants bloaty ones.
I can recommend it with the following caveats:
- it has two themes. You want the newer, non-default one.
- it's an OK fallback MUA, but you don't want to use it every day.
- for some bizarre reason when I put it behind an apache reverse proxy (to do the LDAP auth layer), clicking on an attachment doesn't work. apache returns a 404 without even asking prayer for the attachment. The URLs look the same, so I'm completely stuck on that one.
Hi Trent, Thanks for the recommendation, but this is for hosting emails for corporate customers, so having issues with attachments would be an issue, most are using M$ Outlook as their main MUA, but I'm needing a nice web based one for when they are not in their offices. SquirrelMail, which is the recommended for ISPConfig is just UGLY and I've had issues with installing Horde in the past, hence Roundcube. Cheers, Chris