4 ms·

I was trying to remember where I encountered the macOS Server app before, and why I once considered buying a license. Then I recalled: https://www.cyrusimap.or

I was trying to remember where I encountered the macOS Server app before, and why I once considered buying a license. Then I recalled: https://www.cyrusimap.org/imap/concepts/features/event-notifications.html#imap-features-event-notifications-applepushservice https://www.cyrusimap.org/imap/concepts/features/event-notif... It's too bad that, assuming that documentation is still up to date, Apple doesn't allow smaller IMAP mail providers to integrate with the push notification service.

hda111 5y ago
This project seems to use the same API as Server.app to obtain the push certificate automatically and a Dovecot plugin as available as well. https://github.com/freswa/dovecot-xaps-daemon https://github.com/freswa/dovecot-xaps-daemon https://github.com/freswa/dovecot-xaps-plugin https://github.com/freswa/dovecot-xaps-plugin
oneplane 5y ago
You can in fact get a certificate for 99 per year and use that to generate entitlements that Apple will happily sign CSRs for. It's how we use MicroMDM.
- ciaoben 5y ago
  Hi! I work at https://www.qboxmail.com https://www.qboxmail.com We would love to be able to send push notification to native apple Mail app for our users but we never wrapped our head around the whole certificate thing. (And Apple was... unhelpful). Would love to have support on this! Are you available? Let me know (nicolo.benigni@qboxmail.com)
  - oneplane 5y ago
    I think the best explanation (including APNS which is on top of IMAP open connections) on the certificates and key usages is described here: https://micromdm.io/blog/certificates/ https://micromdm.io/blog/certificates/ ABE and ABM both use the same technology so it's pretty much exactly how Apple intends it to be used. There used to be someone hosting a shared CA for this, but it because cumbersome to deal with third parties not loading the CRL and not using OSCP.
Klonoar 5y ago
This bit of trivia is one of the reasons I love recommending FastMail.

hda111 5y ago

This project seems to use the same API as Server.app to obtain the push certificate automatically and a Dovecot plugin as available as well. https://github.com/freswa/dovecot-xaps-daemon https://github.com/freswa/dovecot-xaps-daemon https://github.com/freswa/dovecot-xaps-plugin https://github.com/freswa/dovecot-xaps-plugin

oneplane 5y ago

You can in fact get a certificate for 99 per year and use that to generate entitlements that Apple will happily sign CSRs for. It's how we use MicroMDM.

ciaoben 5y ago
Hi! I work at https://www.qboxmail.com https://www.qboxmail.com We would love to be able to send push notification to native apple Mail app for our users but we never wrapped our head around the whole certificate thing. (And Apple was... unhelpful). Would love to have support on this! Are you available? Let me know (nicolo.benigni@qboxmail.com)
- oneplane 5y ago
  I think the best explanation (including APNS which is on top of IMAP open connections) on the certificates and key usages is described here: https://micromdm.io/blog/certificates/ https://micromdm.io/blog/certificates/ ABE and ABM both use the same technology so it's pretty much exactly how Apple intends it to be used. There used to be someone hosting a shared CA for this, but it because cumbersome to deal with third parties not loading the CRL and not using OSCP.

Klonoar 5y ago

This bit of trivia is one of the reasons I love recommending FastMail.