Mail-in-a-Box v0.04 Release Notes
Release Date: 2014-10-15 // over 9 years ago-
๐ฅ Breaking changes:
- On-disk backups are now retained for a minimum of 3 days instead of 14. Beyond that the user is responsible for making off-site copies.
- ๐ IMAP no longer supports the legacy SSLv3 protocol. SSLv3 is now known to be insecure. I don't believe any modern devices will be affected by this. HTTPS and SMTP submission already had SSLv3 disabled.
Control panel:
- The control panel has a new page for installing SSL certificates.
- The control panel has a new page for hosting static websites.
- The control panel now shows mailbox sizes on disk.
- It is now possible to create catch-all aliases from the control panel.
- Many usability improvements in the control panel.
DNS:
- Custom DNS A/AAAA records on subdomains were ignored.
- It is now possible to set up a secondary DNS server.
- โก๏ธ DNS zones were updating even when nothing changed.
- Strict SPF and DMARC settings are now set on all subdomains not used for mail.
๐ Security:
- ๐ DNSSEC is now supported for the .email TLD which required a different key algorithm.
- Nginx and Postfix now use 2048 bits of DH parameters instead of 1024.
Other:
- Spam filter learning by dragging mail in and out of the Spam folder should hopefully be working now.
- Some things were broken if the machine had an IPv6 address.
- Other things were broken if the machine was on a non-utf8 locale.
- No longer implementing webfinger.
- โ Removes apache before installing nginx, in case it has been installed by distro.