external/mailinabox
1
0
Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2026-03-27 19:37:22 +01:00
Code Issues Releases Wiki Activity

revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers

Browse Source 
fixes #1300
This commit is contained in:
Joshua Tauberer
2017-12-24 14:41:41 -05:00
parent 441bd35053
commit e924459140
4 changed files with 108 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
CHANGELOG.md
View File

@@ -4,15 +4,14 @@ CHANGELOG
In Development
--------------
Web:
Security:
* Updated cipher list to Mozilla's current intermediate recommendation.
* Updated HSTS header to use longer six month duration.
* HTTPS, IMAP, and POP's TLS settings have been updated to Mozilla's intermediate cipher list recommendation. Some extremely old devices that use less secure TLS ciphers may no longer be able to connect to IMAP/POP.
* Updated web HSTS header to use longer six month duration.
Mail:
* Adding attachments in Roundcube broke after the last update for some users after rebooting because a temporary directory was deleted on reboot. The temporary directory is now moved from /tmp to /var so that it is persistent.
* Updated IMAP/POP cipher list to Mozilla's current mondern recommendation. Some older mail clients that use less secure TLS ciphers may no longer be able to connect to IMAP/POP.
* `X-Spam-Score` header added to incoming mail.
Control panel:
@@ -23,7 +22,7 @@ Control panel:
Installer:
* We now run `apt-get autoremove` at the start of setup to clear out old packages, especially old kernels that take up a lot of space. On the first run, this step may take a long time.
* We now fetch z-push from their tagged git repository
* We now fetch Z-Push from their tagged git repository, fixing an installation problem.
v0.25 (November 15, 2017)
-------------------------