Commit Graph

319 Commits

Author SHA1 Message Date
Maurus Decimus d2d16a0186 Reporting: inboundReportMaxSize setting, which bounds the size of a decompressed inbound DMARC or TLS report 2026-08-12 16:37:16 +02:00
Maurus Decimus 89e6cf89ba UIDBATCHES improvements and logging 2026-08-11 09:17:56 +02:00
Maurus Decimus 5cc9e10b00 IMAP: Implement UIDBATCHES, UIDONLY and MESSAGELIMIT extensions 2026-08-10 19:33:18 +02:00
Maurus Decimus 2c28b5a536 Fix MTA: FUTURERELEASE HOLDUNTIL uses Unix timestamps instead of RFC 3339 date-times 2026-08-10 12:19:45 +02:00
Maurus Decimus 7401fc27c7 Fix IMAP: BODYSTRUCTURE and ENVELOPE return MIME parameters, Content-Description, subjects and display names as raw UTF-8 even to sessions that never enabled UTF8=ACCEPT 2026-08-09 09:06:55 +02:00
Maurus Decimus 0069b037f6 Fix IMAP: COPY/MOVE into a shared folder fails with NO [ALREADYEXISTS] when the destination account already holds the message, leaving the message in the source mailbox and clients in a retry loop 2026-08-09 08:23:53 +02:00
Maurus Decimus 436deaf592 Fix CardDAV: Accept: text/vcard version negotiation is ignored whenever another parameter such as q or charset follows version= 2026-08-08 20:02:07 +02:00
Maurus Decimus 61df5a1857 Bump dependencies 2026-08-03 18:11:26 +02:00
Maurus Decimus 092c3217e4 JMAP Email Delivery Push Notifications 2026-07-29 18:41:21 +02:00
Maurus Decimus 14feec6950 Fix Web Push: Valid VAPID keys are rejected when PEM-encoded with explicit EC parameters, in SEC1 (EC PRIVATE KEY) format, or with a leading byte-order mark 2026-07-26 12:39:48 +02:00
Maurus Decimus aa9f47cdb6 Fix Auth: Scoped credentials with SysApiKeyCreate or SysApiKeyUpdate permissions can regain its own accounts full rights 2026-07-23 15:49:30 +02:00
Maurus Decimus 425d034ae7 Use of Voluntary Application Server Identification (VAPID) in JMAP Web Push 2026-07-20 13:55:00 +02:00
Maurus Decimus 2c04d4473c Fix IMAP: Pipelined STORE and EXPUNGE can execute out of order 2026-07-19 16:02:20 +02:00
Maurus Decimus 6fb4d2b628 IMAP: Mailbox object-quota only enforced in JMAP 2026-07-19 07:52:31 +02:00
Maurus Decimus 2543ec7067 Bump dependencies 2026-07-12 11:39:02 +02:00
Maurus Decimus 0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus d33c4afbc1 IMAP Extension for Object Identifiers (draft-ietf-mailmaint-imap-objectid-bis-04) 2026-06-21 11:29:27 +02:00
Maurus Decimus 52a938297b IMAP: Discard oversized non-synchronizing literals (fixes #2768) 2026-06-19 18:36:38 +02:00
Maurus Decimus 4fd86298fa IMAP: GETJMAPACCESS command to discover the JMAP session resource URL (closes #2736) 2026-06-19 18:16:40 +02:00
Maurus Decimus 64619e4e3e Fix JMAP: Thread/changes never emits a container delete when a thread becomes empty 2026-06-18 16:57:02 +02:00
Maurus Decimus 3f2c5632b8 Fix OIDC: Add default domain name to groups that are not email addresses 2026-06-16 21:51:48 +02:00
Maurus Decimus 33f288d0ea Fix JMAP: */changes methods leak ids of non-shared objects 2026-06-10 13:51:36 +02:00
Maurus Decimus 838a839290 OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change 2026-06-03 18:14:48 +02:00
Maurus Decimus 777cf1252b RateLimit header fields for HTTP 2026-05-23 11:41:43 +02:00
Maurus Decimus 77042480ae Fix IMAP: UID FETCH N:* could miss messages moved into a SELECTed mailbox by another connection 2026-05-14 16:04:19 +02:00
Maurus Decimus 415036dd64 Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege 2026-05-12 15:47:32 +02:00
Maurus Decimus bdba3f20e1 v0.16.5 2026-05-11 17:14:26 +02:00
Maurus Decimus 9a575d9438 Timezone changes from the AccountSettings object return invalidProperties 2026-05-01 14:55:38 +02:00
Maurus Decimus 0b7492240b Fix log viewer: All events show as INFO. 2026-04-29 09:02:34 +02:00
Maurus Decimus ed849e86ba v0.16.2 2026-04-28 16:11:49 +02:00
Maurus Decimus 52733408dc Reduce minimum TLS certificate validity from 86400 to 3600 seconds 2026-04-24 20:18:38 +02:00
Maurus Decimus e73b65c5a3 Box::pin authenticate function 2026-04-24 19:58:03 +02:00
Maurus Decimus 5e87009ca1 IMAP: Fix fetch responses (closes #2940) (credits to @markstos) 2026-04-23 18:02:30 +02:00
Maurus Decimus 3ad4aa82cb v0.16.0 2026-04-20 17:50:58 +02:00
Maurus Decimus af23099e35 Box large futures 2026-04-19 08:11:56 +02:00
Maurus Decimus 1e9daf1ff1 Fix ACL SET permission override 2026-04-16 21:24:18 +02:00
Maurus Decimus 71f54f7e84 Use rustls-platform-verifier for TLS certificate verification instead of webpki + Use aws-lc for cryptographic operations instead of ring 2026-04-04 12:24:41 +02:00
mdecimus e0105bc43b Registry testing - part 5 2026-03-15 18:01:12 +01:00
mdecimus 7c143c85f8 Registry testing - part 1 2026-03-11 18:28:31 +01:00
mdecimus 92c60fff7a JMAP Registry API implementation - part 8 2026-03-11 17:12:22 +01:00
mdecimus 9ccc2ed6f0 JMAP Registry API implementation - part 6 2026-03-11 17:12:22 +01:00
mdecimus 2fea9a46b0 JMAP Registry API implementation - part 2 2026-03-11 17:09:20 +01:00
mdecimus ddf9cc7ba7 Registry caching and directory synchronization 2026-03-11 17:08:00 +01:00
mdecimus 726e8d9c79 Update all modules to use registry - part 4 2026-03-11 17:08:00 +01:00
mdecimus cc88715013 Update all modules to use registry - part 1 2026-03-11 17:00:40 +01:00
mdecimus 2dc0776109 Authenticate using registry - part 5 2026-03-11 17:00:39 +01:00
mdecimus 1a780ca294 Authenticate using registry - part 2 2026-03-11 17:00:39 +01:00
mdecimus b2a808911f v0.15.5 2026-02-14 18:55:56 +00:00
mdecimus 3c0312df1e v0.15.4 2026-01-19 08:23:35 -03:00