Roundcube webmail without https (ssl/tls)

Hosting Support
1

InfinityFree Roudcube Webmail page is without a TLS certificate.
How are we suppose to trust in a email address if the password entered in the webpage mail is sent in clear text?
This should be fixed ASAP

2

Right now the webmail url that infinityfree is givin in the email settings page is: http://185.27.132.238/roundcubemail/

3

and you can get free TLS certificate using LetsEncrypt, so there is no reason for the webmail not having an https

4

The webmail is http://freemail.byetcluster.com/roundcubemail/ as of today (don’t know if will change), so you need to add LetsEncrypt TLS certificate to freemail.byetcluster.com domain @Admin . Will you do it?

5

First of all, we don’t operate the webmail client, iFastNet does. I can try to push them to move it to a proper domain and install an SSL cert on it, but that’s all I can do.

However, the email system has some more severe issues right now than the SSL certificate: https://forum.infinityfree.com/discussion/4784/email-account-webmail-forwarders-issues

So I don’t think enabling SSL on a webmail client backed by a broken mail server is the highest of priorities right now.

6

Everything that puts my password login not at risk would be appreciated @Admin