Hacker News Reader

Comment by adontz | Hacker News Reader

Always wonder if any of these guides will ever include decent web-mail?

Roundcube has come a long way, and they just released a huge update with a responsive design that works great on desktop and mobile!

I once used Web Alpine but I'm not sure if it's still maintained: https://github.com/sergi/re-alpine/blob/master/web/README

Roundcube is _acceptable_ and easy to set up (it's just a PHP web app that acts as a full-fledged MUA and connects via IMAP to your MDA, no different than any other mail client).

Writing one yourself is it's own fun project!

Fun is a very curious way of putting it, considering how batshit crazy IMAP is. The rest of the involved email standards are also a huge dumpster fire.

I'll let Ricardo Signes do the talking: https://www.youtube.com/watch?v=JENdgiAPD6c

You know the term "opinionated software"? IMAP is an opinionated protocol, designed for clients and servers that work exactly the same way that Mark Crispin's PINE and UW-IMAPd did. Disagree with Crispin about anything, and the protocol will fight you every step of the way.

Mind you, I think PINE may have been the greatest email program ever written, but Crispin was not the easiest person to get along with.

These days you can use JMAP instead of IMAP. It was just standardized!

https://jmap.io/

Why would you need to deal with IMAP at all for a webmail client? If the mail server is the one hosting the webmail frontend, you could read the Maildir or mbox (or whatever you're using to store emails) directly. IMAP's only really relevant for locally-installed clients (i.e. the exact thing webmail's supposed to replace).

If I were to write a webmail client for either myself or as a non-toy-project, I would definitely want to be able to host the webmail backend somewhere else than the MTA/MDA, and especially not give the webmail full access to every user's email.

That leaves you with either using some protocol that already exists (IMAP or now JMAP as another persion mentioned in the thread) or coming up with my own.

There are still a couple options here besides IMAP:

- Use server-local users, and have the webmail prompt for those credentials and use them to browse that user's Maildir via SFTP. "Good enough" for small-scale operations. Probably not the best choice for large-scale operations, but likely "good enough" for small-scale.

- Store the emails in a SQL database (e.g. Postgres), with row-level permissions to SQL users for each address, and have the webmail prompt for credentials for those SQL users and use those to connect to the DB and query messages. Probably the ideal choice for large-scale operations.

Both of these options seem more reasonable to me than trying to do anything with IMAP.

I wrote a webmail client (I've apparently long since lost most of the code) to go along with a personal email server I was running about 12 years ago, so it's entirely possible I was just speaking for myself.

If you are going to write your own webmail, use dovecot for your mail-server and then target the maildir store rather than IMAP. You will be much happier.

Don't forget to filter out html mail for XSS and other fun things!

Reply on news.ycombinator.com