hello
I have installed new mail server with roundcube web interface. now befor I will put it in production network I want to ask how secure is roundcube? how to test it?

and also it has self sign certificates. I know I have to by it but now working message is killing in internet browser that it is not secure

Security info is here. I have seen it used in a few places without issue.

http://www.cvedetails.com/vulnerabil...Roundcube.html

an what can you suggest instead of roudcube

There's squirrelmail, but I don't know much about it.

http://squirrelmail.org/

thank you I know it also but i want to choose in security case.

As szboardstretcher already suggested: look up each potential products security documentation and vulnerability history:
http://cve.mitre.org/cgi-bin/cvekey....word=roundcube
http://cve.mitre.org/cgi-bin/cvekey....d=squirrelmail
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=horde
and search SourceForge or the-site-formerly-known-as-Freshmeat for webmail clients (Citadel, Kolab, Open-Xchange, Zafara or Zimbra are probably a bit too feature-rich for what you want) if you don't fancy one of those three. If unsure post here but do some research first: we will help you decide based on the evindece you present but whe should not decide for you. Also please do not cross post questions on LQ.

ok i understold everything. I will let you know thank all for your help