hMailServer 6.2.2

This release pairs the v6.2.2 server with a substantially upgraded Control Panel (the modern .NET 8 admin app). The server is unchanged from the original 6.2.2; all new work below is in the Control Panel and is bundled in this installer.
Server (6.2.2) — authentication hardening

    Full RFC 4013 SASLprep for non-ASCII SASL credentials: RFC 3454 mapping, Unicode NFKC normalization, the complete prohibited-output tables (C.2.1/C.2.2/C.3–C.9), and the RFC 3454 §6 bidirectional check. NFKC is a no-op on ASCII, so existing credentials are unaffected.
    Automated RS256 (public-key) OAuth2 bearer-token regression coverage over POP3 and SMTP, including a tampered-signature rejection check.

Control Panel — UX/UI polish

    Cached settings pages now refresh on navigation (no stale values).
    Domains aliases / distribution lists show real empty and error states instead of a silent blank list.
    Search/filter on the long list pages (Domains, Accounts, Rules, Delivery queue, TCP/IP ports, SSL certificates, IP ranges, Routes).
    Confirmation prompts before deleting aliases, distribution lists, list recipients and incoming relays.
    Numeric input validation with inline feedback in the Domain/Account/Route dialogs (bad values are reported, not silently dropped).
    Standardized empty/error placeholders across the list and grid pages.
    Follows the OS light/dark theme by default (and tracks live OS changes) until you pick a theme manually.
    The overloaded Advanced navigation group is split into Security, Network and Maintenance.
    Dialog inputs unified to the modern Wpf.Ui text style.
    Global exception handler: unhandled errors are logged to %LOCALAPPDATA%\hMailServer\ControlPanel and you are offered a restart.
    Responsiveness: lower minimum window size and an adaptive sidebar / Connect card for small, zoomed or RDP sessions.

Control Panel — AV & security extensibility

    Anti-virus page: "Test ClamAV connection" and "Test ClamWin scanner" buttons (live test via the server), a "Test custom scanner" check, a custom-scanner preset picker for common engines (Microsoft Defender, Sophos, ESET, Bitdefender, Kaspersky), and a ClamWin auto-detect.
    Event scripts page: an "Insert template" picker with ready-made OnAcceptMessage handlers (external AV/DLP scanner, SIEM/Slack/Teams webhook, external HTTP API verdict).
    New "Advanced hardening" page exposing previously-hidden hMailServer.INI knobs (greylisting expiration, SpamAssassin/ClamAV scanner timeouts, DNS cache/server/DNSBL timing, authenticated-user IP replacement, AUTH disable list, X-AuthUser/X-OriginalRcptTo headers, blocked-IP hold, envelope-from rewrite, and a password-hash-algorithm picker: Argon2id/PBKDF2/SHA-256/MD5/Blowfish).
    Account dialog: live password-strength indicator and a confirmation before saving a weak password.

Control Panel — accessibility & automation

    Screen-reader names on icon-only controls, search boxes, the navigation tree and the content host.
    Every navigation node and data-driven settings editor now carries a stable AutomationId; the in-app UI-automation quality audit improved from grade F to grade A.

Builds clean (0 warnings, 0 errors). The Control Panel requires the .NET 8 Desktop Runtime (bundled by the installer).