hMailServer 6.2.2

Server (6.2.2) — authentication hardening

• Full RFC 4013 SASLprep for non-ASCII SASL credentials: RFC 3454 mapping, Unicode NFKC normalization, the complete prohibited-output tables (C.2.1/C.2.2/C.3–C.9), and the RFC 3454 §6 bidirectional check. NFKC is a no-op on ASCII, so existing credentials are unaffected.
• Automated RS256 (public-key) OAuth2 bearer-token regression coverage over POP3 and SMTP, including a tampered-signature rejection check.

Control Panel — UX/UI polish

• Cached settings pages now refresh on navigation (no stale values).
• Domains aliases / distribution lists show real empty and error states instead of a silent blank list.
• Search/filter on the long list pages (Domains, Accounts, Rules, Delivery queue, TCP/IP ports, SSL certificates, IP ranges, Routes).
• Confirmation prompts before deleting aliases, distribution lists, list recipients and incoming relays.
• Numeric input validation with inline feedback in the Domain/Account/Route dialogs (bad values are reported, not silently dropped).
• Standardized empty/error placeholders across the list and grid pages.
• Follows the OS light/dark theme by default (and tracks live OS changes) until you pick a theme manually.
• The overloaded Advanced navigation group is split into Security, Network and Maintenance.
• Dialog inputs unified to the modern Wpf.Ui text style.
• Global exception handler: unhandled errors are logged to %LOCALAPPDATA%\hMailServer\ControlPanel and you are offered a restart.
• Responsiveness: lower minimum window size and an adaptive sidebar / Connect card for small, zoomed or RDP sessions.

Control Panel — AV & security extensibility

• Anti-virus page: "Test ClamAV connection" and "Test ClamWin scanner" buttons (live test via the server), a "Test custom scanner" check, a custom-scanner preset picker for common engines (Microsoft Defender, Sophos, ESET, Bitdefender, Kaspersky), and a ClamWin auto-detect.
• Event scripts page: an "Insert template" picker with ready-made OnAcceptMessage handlers (external AV/DLP scanner, SIEM/Slack/Teams webhook, external HTTP API verdict).
• New "Advanced hardening" page exposing previously-hidden hMailServer.INI knobs (greylisting expiration, SpamAssassin/ClamAV scanner timeouts, DNS cache/server/DNSBL timing, authenticated-user IP replacement, AUTH disable list, X-AuthUser/X-OriginalRcptTo headers, blocked-IP hold, envelope-from rewrite, and a password-hash-algorithm picker: Argon2id/PBKDF2/SHA-256/MD5/Blowfish).
• Account dialog: live password-strength indicator and a confirmation before saving a weak password.

Control Panel — accessibility & automation

• Screen-reader names on icon-only controls, search boxes, the navigation tree and the content host.
• Every navigation node and data-driven settings editor now carries a stable AutomationId; the in-app UI-automation quality audit improved from grade F to grade A.

Builds clean (0 warnings, 0 errors). The Control Panel requires the .NET 8 Desktop Runtime (bundled by the installer).