Hello Zimbra Customers, Partners & Friends, This video is a practical how to on creating the certificate chain file. The certificate chain file usually named commercial_ca.crt and it is needed to deploy TLS certificates on Zimbra. If you’re interested, you can also read our Wiki article about Creating the Certificate Chain. Thanks, Your Zimbra Team
Archive | Community
Implementing a CSRF check on a Zimbra extension
By Barry de Graaff on May 18, 2022 in Community, Open Source, Security & Privacy, Zimbra SkillZ, Zimlets
Hello Zimbra Customers, Partners & Friends, In this article you will learn how to implement a CSRF check in a Zimbra extension. The Java project and source code can be found at https://github.com/Zimbra/zm-extension-guide. In many cases the Cross-Origin-Resource-Policy in the web browser and the setting of the SameSite=Strict attribute on the authentication cookie will provide […]
Email security webinar about MTA STS, TLS RPT, and BIMI
Hello Zimbra Customers, Partners & Friends, Zimbra’s Barry de Graaff and Randy Leiker from Skyway Networks team up for a new webinar series focused on Email Security. These hands-on webinars will include practical how-to information and best practices to help you maximize Zimbra. Learn how to fine-tune key security standards like SPF, DKIM, DMARC, MTA-STS, […]
Zimbra SkillZ: Download email as EML file Zimlet
Hello Zimbra Customers, Partners & Friends, This new Zimlet adds a menu item in the More menu to export/download an email to an EML file. Storing email as a file can be useful for archiving and portability. EML files can be read by other mail clients such as Thunderbird. Screenshots Further reading https://github.com/Zimbra/zimbra-zimlet-export-eml https://gallery.zetalliance.org/extend/items/view/export-and-download-email-as-eml-file […]
Zimbra SkillZ: Confidential Header Zimlet
Hello Zimbra Customers, Partners & Friends, The Confidential Header Zimlet implements the reading and setting of the Sensitivity header RFC2156 in the Zimbra Modern UI. For consistency, it is implemented the same way as in MS Outlook. Configuring Zimbra To allow the setting of the Sensitivity header, enable it on the Zimbra server: zmprov mcf […]
Zimbra SkillZ: Enable DANE Verification for Incoming Email in Zimbra
Hello Zimbra Customers, Partners & Friends, In this post, you’ll learn how to enable DANE for incoming email in Zimbra. DANE is a security protocol that adds additional verification of a TLS certificate. We covered setting up DANE for outgoing email in this post. Here’s some background … Email is sent over the internet with […]