Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been asked to configure webmail for a company whose business is centred around their intellectual property - which is the rationale why we're using webmail, and not a client based email reader to access an internal only IMAP server. The other constaint is the requirement for PGP/GPG support, of which there seems to be a dearth of webmail systems that support it.

I do like the 'ooh shiny'ness of Roundcube (and the perhaps non-tech savvy end users would like it as well), however the patches for GPG support seem to be somewhat outdated. The natural choice seems to be Horde's IMP, however the code seems large, unwieldy, and perhaps no as secure as desired (due to their history of vulnerabilites).

Do you have a better suggestion of a secure webmail system which does have PGP support, or perhaps a more secure system design?

share|improve this question

Not as flashy as Roundcube but the well established Squirrelmail do have a G/PGP plugin

Although the official version does not seem to be updated for a while, and contains security bugs. But according to that page and according to this mail-list there are version which work and with security patches applied.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.