What is solid about exim? Not only does it have more CVEs than any other mail transport agent (including four, all critical or high, just last year), they tend to respond by doing infamous things like releasing security patches on Christmas morning. I'm not the biggest fan of Haraka, but exim is easily the biggest security hassle you can ask for in an email server.

I generally recommend replacing Roundcube with SnappyMail (https://snappymail.eu) -- not having to deal with a database by not maintaining much state is a win.

I was expecting to see Postfix instead of Haraka. I wouldn't have been very surprised at exim.

Does it sync contacts via CardDAV?

I never understood what use Webmail is, if you can’t access your contacts. Every email client I use, needs access to my contacts.

Wow I finally find what migadu is using for its webmail, thanks !

Postfix

> Why not exim or something similarly solid and well-understood?

That's the goal, to avoid things as "solid" as exim.

We accept a substantial volume of mail using haraka. It's not perfect but it's certainly sufficient.

They do have a nice list of features: SMTP + IMAP + POP3 + Antispam + Antivirus Web administration + Web email, ...on your server in ~5 minutes

I was running helm (a hardware device plus mail with many of those features) but they couldn't get anywhere in the marketplace.

What is wrong with Haraka it's like 10 years old?

Node.js