Suppose one was to write a decent webmail front-end, how exactly does one make enough money to sustain its development, even if it's a one or two person effort?
I love open source but there's also a need for developers to live off what they make.
Who has successfully made a webmail front end that they could sell?
Same way any venture does: by collecting money from people who want the product to exist. If there are too many freeloaders and not enough contributors, then free licensing is not a viable option. Development of the software can still be done in a public repo.
In the specific case of webmail[1], I would offer hosted instances.
OTOH, a need to commercialize a FOSS-project is always a latent conflict of interest and I personally only reluctantly make such software part of my stack: I might end up with core devs moving to a proprietary fork full time and not enough other devs to "just fork it".
As to the usage of the word 'webmail', I'd say it's been in techno-parlance for a long time, masquerading as recommended DNS settings.
By 'long time', I mean at least since the mid-to-late 90s. I would often see the word -- not in regular writing, but in tutorials, all the time. Setting up a cPanel instance, for example, you would often be instructed to set up your MX records as 'mail.yourdomain.tld', and your CNAME as 'webmail.yourdomain.tld', just so you'd have something convenient to type in your browser.
I wrote a successful Squirrelmail UI for the third largest Austrian ISP then. It was not sold, but used and liked. When I switched to working with cPanel I never thought of bringing along this patch, which was public decades ago, because I had more important things to do.
The other two options, roundcube and horde, which I updated recently at cPanel, are much better.
protonmail won my business (which is extremely hard to do because I'm a cheap) and I've been using the internet since 1992. I use to run elm on a terminal. They also have a VPN and when you email support, you basically get a 3rd level engineer response within an hour. I forward all my gmail mail to my proton account, and use it for personal and one of my business. I keep banking and bills on gmail for now.
They make an open source webmail + drive + docs suite, and sell a commercial version (e.g. to ISPs). The software is great and they're still around, so it must be working out for them.
The article is pretty clickbaity. While the assertion that Squirrelmail has died is probably correct, the title makes it sound like it would be an explanation on what happened. Instead, it’s just describing the motivations on why cPanel is removing Squirrelmail, while trying to proclaim the death of Squirrelmail in the process.
I'd wager cPanel accounts for the vast majority of Squirrelmail installs these days. If they quit shipping it, its remaining user base is going to quickly dwindle.
There were times I thought that I'd have to give up, but it is much better than it used to be. I've been running my own email since 2002. There were some rough years, but I think we are past the days where you'd try to send to someone at {{big company} and get rejected. It's been quite a few years since I've thought too much about being rejected or fighting spam.
It is a pain to setup DKIM, SPF, etc., but it all works now. I had to say "etc.", mostly because I don't remember all the hoops I jumped through. THe good news is that it has been so long I don't remember.
I guess this period was a necessary evil to improve the email acosystem and make everyone a bit more concerned to setup their system correctly (even though it's non-trivial)..
I've run my own email out of my closet for close to 20 years and have no problem sending. I think DKIM/SPF probably help a lot, but I really can't say, as I've never been blocked (to my knowledge).
We're a long ways from the days when your machine would come with sendmail running and accepting mail for your FQDN OOTB, though... so it's a little more difficult but certainly not out of reach of anyone who is willing to put into the time and effort to learn how to do it right.
(I plan on moving my mail to a new machine (well. new VMs) over the next few days and I expect to run into nearly no issues doing so. Then again, like rhizome, I've been doing this for ~20 years.)
Assuming you have a clueful and attentive upstream ISP and a static /29 or something, running your own mail out of your closet with proper rDNS, spf and dkim probably has better chance of delivery success than the same software setup, but on a dedicated server sharing a /24 of IP space with clueless and occasionally abuse-generating neighboring customers in the same netblock.
You don't really need rDNS delegated to you (and I'm pretty sure that's not what walrus01 meant), just so long as you can set (or have your ISP set) the PTR RRs to match.
Correctly set PTR RRs can (will) make a huge difference (lots of MTAs will reject if FCrDNS fails).
Functionally from an smtp perspective it doesn't really matter if the rDNS is delegated to you, just that it's set correctly... ordinarily it's something you only have to set the PTR record for once, even if you need to manually ask your upstream to do it for the /32 that is your server, get them to set it to mail.whateverdomainname.net
IMHO if you do network engineering it's worth knowing the intricacies of modern SMTP setups. It is not that hard to build a wholly self hosted Postfix setup that has:
Working reverse DNS
SPF
DKIM signing
TLS1.2 transport to and from other smtpd, negotiated opportunistically. You can use a letsencrypt certificate.
Is definitely not an open relay
Requires TLS1.2 + SASL auth of your username and password to send outgoing mail (I use the same account credentials that are also my dovecot IMAPS account)
For those looking for good fully self hosted alternatives, two options:
Roundcube
Rainloop
Squirrel mail is dead, but self hosted webmail is far from dead. Some .EDUs with student populations of 12,000+ use roundcube for their https interface student mail.
Roundcube is good enough. The only problem with my cPanel-powered shared hosting is that filtering isn't part of the Roundcube application but is taken care of by another cPanel app(let). I'd rather have it all in Roundcube.
Squirrelmail had this nice option where I could set a BCC for every email - I BCC all my emails to myself (hack to get around another problem). Roundcube has no such option.
In my experience, I have seen no benefit that Roundcube has (feature-wise) other than being prettier.
I probably have a 30k folder myself, and Roundcube still seems snappy.
I generally like it, but for some reason wish there were other things to try. Mailpile is a stand-alone server and thus is more complex to install and run (or at least that was my experience the one time I tried).
> Squirrelmail had this nice option where I could set a BCC for every email
I can see such an option in Roundcube 1.2.3. Under Settings/Identities/[WhateverIdentity] there is a “BCC” field, which seems to be exactly what you want.
(This is not an endorsement of Roundcube – I use Gnus myself.)
It's really good when you host small Web sites and don't want to fiddle around much. Especially cause I can setup resellers who can manage their own accounts. Agencies use it a lot. There whole business can run on a couple of servers running cpanel with WordPress on each account.
Is it in a fork? The official site isn't updated since 2013 and Debian removed it in recent versions (jessie is the last to have it) because of that. Do you happen to know where the new versions and development are? Squirrelmail is by far my favorite webmail setup, i use it for almost 15 years now and exactly what i like about it is that it has remained pretty much the same all these years, so i'd like to make a manual installation over a recent version (Debian seems to have an svn version from 2012) once i upgrade.
My, perhaps incomplete, understanding is that you can just run the old thing if you can support PHP5. Otherwise you can run the eternal dev version, but you will have access to fewer plugins.
Added: It appears there is some version 1.4.23 (the old thing) that will run on PHP7. I am currently running 1.4.22 on PHP5 under OpenBSD with no problems. The problem seems to be in figuring out what version to run.
There was talk about integrating Mailpile into cPanel years ago[1] - I remember discussing it with an acquaintance who worked at cPanel at the time. I wonder why it never gained traction with either them, or any other web hosting/control panels? Plesk for example, which is probably cPanel's biggest competitor, exclusively bundles Roundcube.
I did some mail ui work while at cPanel. We have three options, the old Squirrelmail, the recently updated Horde, and Roundcube. That should be enough.
Squirrelmail was unmaintained, hence it's deprecated. I did maintain some patches decades ago, but don't work with PHP anymore for several years. And not with cPanel anymore either. Dropping squirrel was discussed 5 years ago already.
I host my websites and have subsequent email via DreamHost.
When I first signed up right around their billing fiasco ~10 years ago, they where on SquirrelMail with a hardstop "convert to gMail" option. They have since switched to a different email default [AtMail] about 1.5 years ago.
On one hand I miss SquirrelMail. On the other hand, I now understand the change [ageing tech]. There has been a learning curve along with A/B testing, for example having the "hardcore delete all emails in your primary inbox" button right next to your "refresh your primary inbox" button... bad times which have been solved.
64 comments
[ 2.9 ms ] story [ 112 ms ] threadI love open source but there's also a need for developers to live off what they make.
Who has successfully made a webmail front end that they could sell?
OTOH, a need to commercialize a FOSS-project is always a latent conflict of interest and I personally only reluctantly make such software part of my stack: I might end up with core devs moving to a proprietary fork full time and not enough other devs to "just fork it".
[1] when did this even become a word?
By 'long time', I mean at least since the mid-to-late 90s. I would often see the word -- not in regular writing, but in tutorials, all the time. Setting up a cPanel instance, for example, you would often be instructed to set up your MX records as 'mail.yourdomain.tld', and your CNAME as 'webmail.yourdomain.tld', just so you'd have something convenient to type in your browser.
[0] https://en.wikipedia.org/wiki/Pine_(email_client)
Around 1996-7? Right around the time that HoTMaiL came about.
FastMail, but they had to put a whole service behind it.
The other two options, roundcube and horde, which I updated recently at cPanel, are much better.
“Community funded and supported”
Which you probably don't notice because you forward Gmail -> Protonmail. ;)
ProtonMail is easily one of the best mail services I've used; particularly now that there's an IMAP bridge.
They make an open source webmail + drive + docs suite, and sell a commercial version (e.g. to ISPs). The software is great and they're still around, so it must be working out for them.
It is a pain to setup DKIM, SPF, etc., but it all works now. I had to say "etc.", mostly because I don't remember all the hoops I jumped through. THe good news is that it has been so long I don't remember.
We're a long ways from the days when your machine would come with sendmail running and accepting mail for your FQDN OOTB, though... so it's a little more difficult but certainly not out of reach of anyone who is willing to put into the time and effort to learn how to do it right.
(I plan on moving my mail to a new machine (well. new VMs) over the next few days and I expect to run into nearly no issues doing so. Then again, like rhizome, I've been doing this for ~20 years.)
Correctly set PTR RRs can (will) make a huge difference (lots of MTAs will reject if FCrDNS fails).
Working reverse DNS
SPF
DKIM signing
TLS1.2 transport to and from other smtpd, negotiated opportunistically. You can use a letsencrypt certificate.
Is definitely not an open relay
Requires TLS1.2 + SASL auth of your username and password to send outgoing mail (I use the same account credentials that are also my dovecot IMAPS account)
Roundcube
Rainloop
Squirrel mail is dead, but self hosted webmail is far from dead. Some .EDUs with student populations of 12,000+ use roundcube for their https interface student mail.
I didn't even know... crap.
Squirrelmail had this nice option where I could set a BCC for every email - I BCC all my emails to myself (hack to get around another problem). Roundcube has no such option.
In my experience, I have seen no benefit that Roundcube has (feature-wise) other than being prettier.
I thought my 50k-70k inbox was huge, but I just typically order by date reversed ...
I generally like it, but for some reason wish there were other things to try. Mailpile is a stand-alone server and thus is more complex to install and run (or at least that was my experience the one time I tried).
I can see such an option in Roundcube 1.2.3. Under Settings/Identities/[WhateverIdentity] there is a “BCC” field, which seems to be exactly what you want.
(This is not an endorsement of Roundcube – I use Gnus myself.)
Added: It appears there is some version 1.4.23 (the old thing) that will run on PHP7. I am currently running 1.4.22 on PHP5 under OpenBSD with no problems. The problem seems to be in figuring out what version to run.
It was the first webmail application offered at a .edu I worked at and that's been 15 years ago. It was -- or so it seemed -- "dead" then.
[1] https://features.cpanel.net/topic/add-mailpile-as-webmail-op...
Squirrelmail was unmaintained, hence it's deprecated. I did maintain some patches decades ago, but don't work with PHP anymore for several years. And not with cPanel anymore either. Dropping squirrel was discussed 5 years ago already.
When I first signed up right around their billing fiasco ~10 years ago, they where on SquirrelMail with a hardstop "convert to gMail" option. They have since switched to a different email default [AtMail] about 1.5 years ago.
On one hand I miss SquirrelMail. On the other hand, I now understand the change [ageing tech]. There has been a learning curve along with A/B testing, for example having the "hardcore delete all emails in your primary inbox" button right next to your "refresh your primary inbox" button... bad times which have been solved.