We’re proud to announce that the beta release of the next major version 1.2 of
Roundcube webmail is out now for download and testing. With this milestone
we introduce new features primarily focusing on security and PGP encryption:
- PHP7 compatibility
- PGP encryption
- Drag-n-drop attachments from mail preview to compose window
- Mail messages searching with predefined date interval
- Improved security measures to protect from brute-force attacks
And of course plenty of small improvements and bug fixes.
The PGP encryption support in Roundcube comes with two options:
The integration of this browser plugin for Firefox
and Chrome comes out of the box in Roundcube 1.2 and is enabled if the Mailvelope
API is detected in a user’s browser. See the Mailvelope documentation
how to enable it for your site.
Read more about the Mailvelope integration
and how this looks like.
This Roundcube plugin adds server-side PGP encryption features to Roundcube. Enabling this
means that users need to fully trust the webmail server as encryption is done on the server
(using GnuPG) and private keys are also stored there.
In order to activate server-side PGP encryption for all your users, the ‘enigma’
plugin, which is shipped with this package, has to be enabled in the Roundcube config.
See the plugin’s README for details.
Also read this blogpost
about the Enigma plugin and how it works.
IMPORTANT: with this version, we finally deprecate some old Roundcube library functions.
Please test your plugins thoroughly and look for deprecation warnings in the logs.