RainLoop is dead, if possible switch to SnappyMail: https://github.com/the-djmaze/snappymail

[ner00]

SnappyMail repo

[Zebouski]

thank you for the PSA, i was looking for a php8 upgrade for this client

[Neustradamus]

Please use SnappyMail from @the-djmaze, we can thanks for this work!

• https://snappymail.eu/
• https://github.com/the-djmaze/snappymail/

Please note that SnappyMail supports SCRAM-SHA-* for connection, very good security:

• SCRAM-SHA-1-PLUS + SCRAM-SHA-256-PLUS + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports the-djmaze/snappymail#182
• https://github.com/the-djmaze/snappymail/blob/master/snappymail/v/0.0.0/app/libraries/RainLoop/Model/Account.php

Linked to:

• RainLoop is dead, if possible switch to SnappyMail: https://github.com/the-djmaze/snappymail #2185
• Sec: Fix CVE-2022-29360 XSS vulnerability #2183
• Please fix the exploit, thanks! CVE-2022-29360 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29360 https://www.ddosi.org/cve-2022-29360/ https://www.youtube.com/watch?v=6dSiQH0pijk #2180
• Jan 2022: Is rainloop still maintained? #2162
• Security Contact for high severity Security Issue #2142
• Security Vulnerability "/_data_/…/storage/cfg/…/…/accounts" #2134
• Is this project dead? #1831

[mbsouth]

How about keeping the discussion about Rainloop Webmail instead of bashing on it?
If you think you're better off with Snappymail, I don't understand what you're doing here.

@RainLoop
Thx for patch!

[ner00]

@mbsouth Who's bashing who here? Don't be a hypocrite. The Rainloop project stalled for close to a year with no word from the dev team. During that silent period an XSS exploit was disclosed. I opened this issue because I really thought that there wouldn't be any new development and also because people should know about both the exploit and the alternative project.

In any case, the dev team can close/delete this issue at any moment.

[ner00]

Side note: recent commits seem to confirm that Rainloop is dead and v1.17 is the last version ever. Licensing and Pro feature validation is being removed, contacts for the commercial version have been yanked out... it does point in the direction of no further development nor support, free or not.

[ghost]

@Neustradamus

Please use SnappyMail from @the-djmaze, we can thanks for this work!

You ruined design conception in your UI unfortunately. Original RainLoop looks much better in details like borders, indents, fonts, etc.

[the-djmaze]

You ruined design conception in your UI unfortunately

Thank god anyone can fix that!
And then they should also use https://www.designmantic.com/community/website-design-guide-color-blind.php

[gusarg81]

I was going to Switch to SnappyMail, but the Design... I would have to re-design the theme... The are alignment problems in icons for example, and other stuff.