57e2f94254
ASN and GeoIP default location update
2026-08-16 15:23:14 +02:00
ccceff541f
IDN fixes
2026-08-16 15:12:43 +02:00
a48f89eb1d
Fix Vapid: Normalize contact URI
2026-08-15 00:04:48 +02:00
520b1889ab
Fix WebPush: Validate push URL and use application/octet-stream as Content-Type for encrypted payloads
2026-08-14 15:54:09 +02:00
d2d16a0186
Reporting: inboundReportMaxSize setting, which bounds the size of a decompressed inbound DMARC or TLS report
2026-08-12 16:37:16 +02:00
fc2fbe11b3
Fixed Cargo.toml
2026-08-10 19:35:32 +02:00
5cc9e10b00
IMAP: Implement UIDBATCHES, UIDONLY and MESSAGELIMIT extensions
2026-08-10 19:33:18 +02:00
21ea8fe9be
Spam filter: url_original expression variable for Url rules
2026-08-10 12:41:08 +02:00
2c28b5a536
Fix MTA: FUTURERELEASE HOLDUNTIL uses Unix timestamps instead of RFC 3339 date-times
2026-08-10 12:19:45 +02:00
1a6c8d009b
Memory allocator: Replaced the unmaintained jemallocator crate with tikv-jemallocator (contributed by @checkraisefold)
2026-08-10 11:02:42 +02:00
7401fc27c7
Fix IMAP: BODYSTRUCTURE and ENVELOPE return MIME parameters, Content-Description, subjects and display names as raw UTF-8 even to sessions that never enabled UTF8=ACCEPT
2026-08-09 09:06:55 +02:00
36eca8c938
Fix Sharing: Accounts holding the impersonate permission never have their ACL grants collected, so shared items are never listed in JMAP sessions, CalDAV/CardDAV discovery or IMAP
2026-08-09 07:46:28 +02:00
436deaf592
Fix CardDAV: Accept: text/vcard version negotiation is ignored whenever another parameter such as q or charset follows version=
2026-08-08 20:02:07 +02:00
61df5a1857
Bump dependencies
2026-08-03 18:11:26 +02:00
4df2a66705
Fix Redis: Task and queue locks are never released after a worker dies, because failed lock attempts refresh the lock expiry
2026-08-02 17:59:55 +02:00
092c3217e4
JMAP Email Delivery Push Notifications
2026-07-29 18:41:21 +02:00
c61a6a7955
v0.16.15
2026-07-26 18:59:40 +02:00
aa9f47cdb6
Fix Auth: Scoped credentials with SysApiKeyCreate or SysApiKeyUpdate permissions can regain its own accounts full rights
2026-07-23 15:49:30 +02:00
c105cff8fb
Fix CalDAV: calendar-query REPORT returns empty calendar-data for JMAP-created events
2026-07-19 21:27:01 +02:00
6fb4d2b628
IMAP: Mailbox object-quota only enforced in JMAP
2026-07-19 07:52:31 +02:00
764c2c1e1c
v0.16.13
2026-07-12 19:18:29 +02:00
f73fefdd69
Fix: Reject invalid duration values (e.g. 1h30m)
2026-07-12 14:43:51 +02:00
448f735d55
Fix Store PostgreSQL channel binding ( #3212 )
...
The former behaviour to always use a SHA-256 hash of the server
certificate for the tls-server-end-point channel binding was
incorrect with regard to RFC5929, which specifies if the signature
algorithm uses a single hash function, that hash function should be
used, unless the signature algorithm uses MD5 or SHA-1, in which
case the channel binding should use an SHA-256 hash.
This change attempts to align with the behaviour of OpenSSL, used
by PostgreSQL, in using the signature algorithm's hash function.
2026-07-08 23:00:16 +02:00
d368b53ca1
DMARCbis implementation
2026-07-05 16:34:57 +02:00
94b33187a0
DKIM2 tests
2026-07-03 20:07:37 +02:00
186d9feecb
DKIM2 verification
2026-07-01 16:20:02 +02:00
e3c6f95bfd
Bump to mail-auth 0.11
2026-06-30 11:53:55 +02:00
0eb08b9fb3
Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks
2026-06-25 19:24:10 +02:00
93b3b70616
Redis Sentinel support as an in-memory store and cluster coordinator backend ( closes #2430 )
2026-06-25 10:26:23 +02:00
ab7d81e486
Encryption-at-rest: Support for AES-256-GCM and ChaCha20-Poly1305 for S/MIME ( closes #161 )
2026-06-25 09:53:07 +02:00
9525a891f3
Bump to mail-auth 0.9.2 + minor schema fixes
2026-06-24 19:08:27 +02:00
d1dd00558f
S3: Support for allowInvalidCerts option to allow connecting to S3 endpoints with invalid TLS certificates
2026-06-24 14:21:11 +02:00
df164e07c8
DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records
2026-06-22 23:13:45 +02:00
94bea19f01
DANE: Improper TLSA record validation ( #2328 - credits to @vdukhovni)
2026-06-21 15:23:53 +02:00
d33c4afbc1
IMAP Extension for Object Identifiers (draft-ietf-mailmaint-imap-objectid-bis-04)
2026-06-21 11:29:27 +02:00
0958d97925
International Domain Names (IDN) support ( closes #207 )
2026-06-20 09:02:26 +02:00
ad47f03f48
DANE: Improper TLSA record validation ( fixes #2328 )
2026-06-19 17:14:26 +02:00
0e004b5b56
Fix JMAP tests
2026-06-19 12:13:19 +02:00
3f2c5632b8
Fix OIDC: Add default domain name to groups that are not email addresses
2026-06-16 21:51:48 +02:00
471254d324
Fix Registry: Object ids are parsed as numbers
2026-06-15 21:09:10 +02:00
0d131afc03
Fix Autodiscover v2: Read email address from query parameters
2026-06-15 15:29:58 +02:00
2cb765ed37
Fix CardDAV: Version requests included in address-data are ignored
2026-06-15 12:57:37 +02:00
e07fb0a7c1
Use testcontainers for integration tests
2026-06-11 18:08:13 +02:00
33f288d0ea
Fix JMAP: */changes methods leak ids of non-shared objects
2026-06-10 13:51:36 +02:00
26f41f8aa7
v0.16.8
2026-06-06 18:46:25 +02:00
0fdcdd4f87
Bump dependencies
2026-06-03 19:57:12 +02:00
838a839290
OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change
2026-06-03 18:14:48 +02:00
bea96cccfb
v0.16.7
2026-05-28 17:34:08 +02:00
ae4f21f6f3
Fix DNS updater: Keep external TXT records when updating RRSet
2026-05-28 16:23:15 +02:00
4866cd331a
Bump to dns-update 0.5.0
2026-05-23 19:20:25 +02:00
Maurus Decimus
Hugh Cole-Baker