mailinabox/CHANGELOG.md

CHANGELOG

v0.04 (October 15, 2014)

Breaking changes:

• On-disk backups are now retained for a minimum of 3 days instead of 14. Beyond that the user is responsible for making off-site copies.
• IMAP no longer supports the legacy SSLv3 protocol. SSLv3 is now known to be insecure. I don't believe any modern devices will be affected by this. HTTPS and SMTP submission already had SSLv3 disabled.

Control panel:

• The control panel has a new page for installing SSL certificates.
• The control panel has a new page for hosting static websites.
• The control panel now shows mailbox sizes on disk.
• It is now possible to create catch-all aliases from the control panel.
• Many usability improvements in the control panel.

DNS:

• Custom DNS A/AAAA records on subdomains were ignored.
• It is now possible to set up a secondary DNS server.
• DNS zones were updating even when nothing changed.
• Strict SPF and DMARC settings are now set on all subdomains not used for mail.

Security:

• DNSSEC is now supported for the .email TLD which required a different key algorithm.
• Nginx and Postfix now use 2048 bits of DH parameters instead of 1024.

Other:

• Spam filter learning by dragging mail in and out of the Spam folder should hopefully be working now.
• Some things were broken if the machine had an IPv6 address.
• Other things were broken if the machine was on a non-utf8 locale.
• No longer implementing webfinger.
• Removes apache before installing nginx, in case it has been installed by distro.

v0.03 (September 24, 2014)

• Update existing installs of Roundcube.
• Disabled catch-alls pending figuring out how to get users to take precedence.
• Z-Push was not working because in v0.02 we had accidentally moved to a different version.
• Z-Push is now locked to a specific commit so it doesn't change on us accidentally.
• The start script is now symlinked to /usr/local/bin/mailinabox.

v0.02 (September 21, 2014)

• Open the firewall to an alternative SSH port if set.
• Fixed missing dependencies.
• Set Z-Push to use sync command with ownCloud.
• Support more concurrent connections for z-push.
• In the status checks, handle wildcard certificates.
• Show the status of backups in the control panel.
• The control panel can now update a user's password.
• Some usability improvements in the control panel.
• Warn if a SSL cert is expiring in 30 days.
• Use SHA2 to generate CSRs.
• Better logic for determining when to take a full backup.
• Reduce DNS TTL, not that it seems to really matter.
• Add SSHFP DNS records.
• Add an API for setting custom DNS records
• Update to ownCloud 7.0.2.
• Some things were broken if the machine had an IPv6 address.
• Use a dialogs library to ask users questions during setup.
• Other fixes.

v0.01 (August 19, 2014)

First release.