Oct 21, 2026, 4:58 PMToday's #PHP incident (the nature of the flaw) has proven once again how absurdly bad this software is. We cannot afford running production systems with it.
So, here we go: What is an alternative to Roundcube that has:
* somewhat decent mail features
* X-OAUTH2 login
* Plugin API for provisioning mail identities on user login
* no integrated directory or forced dependency on LDAP
* Not written in PHP – Rust preferred, no Go either but not as hard as PHP
Any pointers?
@nik Stalwart? But it's the inverse of Roundcube: Full-featured mail server, but no webmail yet. Rust. There's JMAP support instead.
Oct 21, 2026, 5:07 PMNo way. I will not trust Stalwart with anything remotely important*. And as you already said, it's not a webmail client anyway.
*Because it is incapable of simply storing mail, but instead makes a jigsaw puzzle out of it that cannot easily be restored without Stalwart running – a no-no combined with Stalwart being corporate-driven and hence potentially going away any time.