Back to Catalog
Bichon logo

Bichon

Self-hosted email archiving server with full-text search

app

Alternative to: mimecast, proofpoint archive

Repository Docs
About Versions (46)
Back to Versions

2.0.3

2026-09-05

Release Notes

Security

  • Password comparisons now use subtle::ConstantTimeEq to prevent timing side-channel attacks.
  • /api/login endpoint now enforces per-client-IP rate limiting; exceeding the threshold returns 429 Too Many Requests.
  • Passwords are now stored as Argon2id hashes. Legacy encrypted credentials are lazily migrated to the new format on next successful login.

Bug Fixes

  • Tantivy OpenWriteError is now properly included in the retry mechanism, improving write operation resilience.

Full Changelog: https://github.com/rustmailer/bichon/compare/2.0.2…2.0.3

Changelog on GitHub →