Mailman 3 SaaS

New dont_break_dkim setting for lists

This setting helps preserve DKIM signatures when DMARC mitigation mode is disabled.

Migration to email.message.EmailMessage

This improves compliance with modern email standards for encoding and security, eliminating errors like "Non-ascii sender address" or "InvalidMultipartContentTransferEncodingDefect".

Align defaults with latest features and best practices

Links to Postorius management pages are added to the admin-action-* and admin-notice-* templates. We set new lists as DMARC-mitigated by default and notify owners whenever a member's bounce score increases.

New Closed subscription and unsubscription policy

Subscribers cannot start a join or a leave under the Closed policy. Owners can still add members, send invitations, and remove members.

Fix crash on user/address deletion with preferred-address memberships

Deleting or unlinking a user's preferred address left behind membership records that crashed message delivery and API calls. All code paths that remove a preferred address now properly clean up dependent memberships.

Fix broken DKIM signatures for Apple Mail

In rare cases involving Apple Mail sender devices, the DKIM signature broke on the receiver's end.

Fix broken DKIM signatures for HyperKitty web posts

When a message is compiled in the web interface, the DKIM signature sometimes broke on the receiver's end.

Fix HTML to plain text conversion

HTML to plain text conversion no longer shunts messages when emits output that is not valid UTF-8. Invalid bytes are now replaced instead.

Improve multi-site deployment behaviour

Service emails now respect virtual domains in the "From:" header.

New Closed subscription and unsubscription policy

The web interface follows the Closed policy. Subscribers cannot start a join or a leave. Owners can still add, invite, and remove members.

Fix account takeover vulnerability

An attacker can attach a victim's email to their own web account - even though they cannot confirm it - and have the next login silently merge the victim's entire Mailman identity into the attacker's. This is most damaging against list owners who only exist in Mailman and never created a web account.

Plain chronological view of messages

A new "By message" view lists archive messages in chronological order, without grouping them by thread.

Mark a thread unread

A logged-in user can mark a thread unread from the thread page. Mark as read marks it read again and keeps a date sort.

Fix archives full-text indexer error

The annoying "Term Too Long" error in Xapian has been fixed.

Fix date rendering

Removed relative dates from the search results page and fixed several date-rendering issues across the web pages.

Fix API and search archive exposure

If a mailing list with private archives is switched to the "never" policy without archive deletion, the archive becomes publicly exposed in the /api and /search paths.

Fix archive pagination

Pagination in archives works correctly.

Fix the voting system

A like or a dislike can be removed.