6 ms·

hmailserver is the replacement you want for this.

• SteveNuts 3y ago
  This is the way I ended up going and it worked great.
• mycall 3y ago
  It is no longer under development.
  • wruza 3y ago
    That happens when you finish your roadmap and call it done. It’s frustrating that the modern sense of it became automatically negative. This is an actual claim if someone is interested: https://www.hmailserver.com/state https://www.hmailserver.com/state On SHA-1: https://en.wikipedia.org/wiki/SHA-1 https://en.wikipedia.org/wiki/SHA-1 As of 2020, chosen-prefix attacks against SHA-1 are practical.[6][8] As such, it is recommended to remove SHA-1 from products as soon as possible and instead use SHA-2 or SHA-3. Replacing SHA-1 is urgent where it is used for digital signatures. Digging further: https://www.hmailserver.com/forum/viewtopic.php?t=40568 https://www.hmailserver.com/forum/viewtopic.php?t=40568 Tl;dr: it uses sha256 by default and only has sha1 for backwards compatibility, which is considered insecure today. Critical updates are still there.
    • mycall 3y ago
      hmailserver needs openssl version bumps from time to time.