qmail
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
4recommend
1warn against
Nov 7, 2025first mention
Oct 30, 2026latest mention
Why people recommend it
“It is possible to write more secure software[0]”
“A simple design, it had security baked in from the start, and remains one of the most secure software packages in history.”
Show 3 more
“because it was running qmail, it didn't even slow down”
“perfect for admins who valued security over features”
“showed that one could have (mostly) security bug free software”
Caveats and dissent
“qmail has seen RCEs [0, 1] because DJB didn't consider integer and buffer overflows in-scope for the application.”
Often compared with
Who recommends it in their own words
Threads where it came up
- CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq 2 mentions
- Two billion email addresses were exposed 2 mentions
- Linode Security Incident 1 mention
- WordPress: Unauthenticated path traversal leading to conditional RCE 1 mention
- Self-host your mail server 1 mention
- A human postmortem of the 1996 AOL outage 1 mention
Also written as Qmail. Data: qmail.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 11
“It is possible to write more secure software[0]”
“A simple design, it had security baked in from the start, and remains one of the most secure software packages in history.”
“Long time ago I used to run qmail for my school (about 2000 users). It was a lot of fun to do”
“because it was running qmail, it didn't even slow down”
“perfect for admins who valued security over features”
“showed that one could have (mostly) security bug free software”
"with no downtime and no rebooting" So, no patching. I used to boast about my NetWare server uptimes but that is so noughties 8)
“qmail has seen RCEs [0, 1] because DJB didn't consider integer and buffer overflows in-scope for the application.”
“I used Sendmail, Exim, Postfix, and qmail at various times.”
did exactly same. the only difference is that i use compromised emails to train spam filter
“I setup qmail in my VPS”