v1.0.7

Security

• Mailing lists no longer pass on forged senders. A post whose author could not be verified now goes out as "Name via List" from the list's own address. The original address is kept in X-Original-From. Before, a list member proven only by SPF, or anyone posting to an open list, could send as another address on your domain with a valid DKIM signature. Posts approved by a moderator are always sent this way.
• Users are told when a filter starts forwarding their mail. If a Sieve filter starts redirecting mail to a new outside address, a notice goes straight to the user's inbox, and the filter cannot hide it. Hidden forwarding is how an attacker keeps reading mail after the victim changes their password.
• New server setting: "Allow forwarding by mail filters" (sieve_external_redirect, on by default). Turn it off to stop filters from sending mail outside the server.
• Invitations can no longer remove or replace your own events. Answering an invitation no longer overwrites or deletes an event with the same ID that someone else organized.
• Authentication results can no longer be faked in mail from colleagues. Results headers in the server's own name are now stripped from mail sent by signed-in users, as they already were for all other incoming mail.
• Out-of-office replies only go to verified senders, meaning senders that passed SPF or DMARC. A forged return address can no longer make the server send signed mail with a subject chosen by a stranger.
• Optional captcha on the web sign-in page. Choose hCaptcha, Cloudflare Turnstile, Google reCAPTCHA or the self-hosted ALTCHA in the server settings. The captcha is checked before the password, so unsolved captchas don't count against login limits.

Behaviour change: senders whose domain has no SPF record and whose mail fails DMARC no longer get out-of-office replies.

Web client

• New Material 3 Expressive design. Coccent colour, with new motion, buttonshapes and a split send button. The interface uses the bundled Roboto Flex font.
• New unoMail logo in the app, favicon
• Gmail-style inbox categories. Tabs now have icons and "N new" badges, plus a preview of the newest unread
  senders.
• Message list header with a selection menu, "Mark all as read" and a range count.
• Manage subscriptions page. It lists ers one-click unsubscribe, so you can unsubscribe sender by sender. Existing mail is included.
• Sidebar: folders are now links, so a new tab, and they show custom tooltips.
• On-device translation of foreign-language messages using the browser's built-in translator (Chrome and Edge
  on desktop) when no AI model is set up.
• Masked addresses: administrators now choose closed mask domains from the hosted domains instead of typing them.

[NEW] Summary cards

Fixes

• Phones: the message list no longer scrol.
• Admin models: choosing local-only extraction for purchase cards works again.
• Removed a stray space in the Content-Sec