DavMail 7.0.0 Pivots to Microsoft Graph With Delta Sync, Drops Legacy Settings

DavMail now asks only what changed since the last check
The new delta sync feature reduces bandwidth by syncing only folder changes instead of entire contents with each client check.
Mark

So DavMail is basically a translator between Outlook's world and everyone else's?

Mimi

Exactly. It converts open standards like IMAP and CalDAV into Exchange and Office 365 requests. If you want to use Thunderbird or Apple Mail but your company runs Exchange, DavMail is how you do it.

Luke

And this new version is pushing people toward Microsoft's newer API—Graph instead of the older EWS?

Mimi

Right. Seventy changelog entries are Graph-related versus eighteen for EWS. The big win is delta sync—instead of syncing entire folders, it only syncs what changed.

Mark

That sounds efficient. What's the catch?

Mimi

A few things. The caldavImpersonate setting is gone, so if someone was using that to control how shared mailboxes work, they need to adjust. And there's a new permission scope DavMail needs: Calendars.ReadWrite.Shared.

Luke

Is that permission automatically approved in most tenants?

Mimi

Not necessarily. If an organization restricts app permissions—which many do for security—they have to explicitly approve it. If they don't, token validation fails.

Mark

So admins need to check their permission policies before upgrading?

Mimi

Yes. And users will need to sign in again when switching from EWS to Graph. It's not seamless.

Luke

How many organizations are actually using DavMail at scale? The reporting doesn't say.

Mimi

That's fair. We know it exists and has a user base, but the numbers aren't in the source material.

Mark

Is this version stable, or is it still working out bugs?

Luke

The changelog suggests it's been through development, but there's no information about beta testing or known issues in what we have.

  • DavMail's shift to Microsoft Graph as its primary protocol is no longer optional — version 7.0.0 makes Graph-first behavior the default, leaving EWS increasingly behind with only a fraction of the new improvements.
  • Folder delta sync, now enabled automatically, cuts network overhead by fetching only what has changed since the last check rather than pulling entire folder contents every time — a meaningful efficiency gain for high-volume mailboxes.
  • The removal of the caldavImpersonate setting and the addition of the Calendars.ReadWrite.Shared permission scope create real upgrade friction: tenants with strict app permission policies risk token validation failures if they don't act before upgrading.
  • Users switching from EWS to Graph will be forced to re-authenticate entirely, as old tokens cannot carry over — a disruption that requires coordination between administrators and end users.
  • Admins in restricted Microsoft tenants are urged to audit and approve the new Graph permission scopes now, treating the upgrade as a permission governance event rather than a routine software update.

In the long negotiation between open standards and proprietary ecosystems, DavMail 7.0.0 marks a deliberate step toward Microsoft's newer Graph API — a quiet but consequential migration for the communities of users who have long relied on this open-source bridge to keep their preferred tools connected to corporate infrastructure. Released in September 2026, the update brings more efficient synchronization by default, removes a legacy configuration option, and introduces new permission requirements that demand administrative attention before any upgrade proceeds. It is a reminder that even the most faithful translation layer must eventually speak the language of the present.

DavMail is the open-source gateway that lets people use standard mail and calendar clients — rather than Outlook — while still connecting to Exchange and Office 365. It works by translating between the open protocols most apps speak (IMAP, SMTP, CalDAV, CardDAV, LDAP) and the proprietary languages Microsoft's servers use. Version 7.0.0 represents a significant tilt toward Microsoft Graph, the newer of those server-side languages, with seventy changelog entries touching Graph improvements compared to just eighteen for the older Exchange Web Services.

The headline change is folder delta sync, now enabled by default. Previously, every folder check prompted DavMail to request the entire folder contents from Graph and compare them locally. Now it asks only for what changed since the last check, caching a local copy in between. The option existed before but had to be turned on manually — its promotion to default status signals where the project's priorities lie.

The release also smooths several rough edges: Microsoft's rate-limiting headers are now handled more gracefully, messages appended over IMAP retain their original dates and threading, and meeting responses can now target a single occurrence within a recurring series rather than the whole event. Contact distribution lists are now surfaced as groups that mail clients can display, though the feature is disabled for Thunderbird pending that client's own support.

For administrators, the breaking changes are the critical story. The davmail.caldavImpersonate setting has been removed — DavMail now handles shared mailbox impersonation automatically. More urgently, Graph users must ensure their Microsoft tenant has approved a new permission scope, Calendars.ReadWrite.Shared, before upgrading. Missing the Mail.ReadWrite permission will cause token validation to fail outright. And anyone switching from EWS to Graph will need to sign in fresh, as old tokens cannot be reused. For organizations with tightly governed permission policies, the upgrade checklist begins not with the software itself, but with the permissions console.

DavMail, the open-source Java gateway that lets people use their favorite mail and calendar apps instead of Outlook while still connecting to Exchange and Office 365, has released version 7.0.0 with a significant shift in how it talks to Microsoft's servers. The new version turns on a more efficient syncing method by default, removes a setting that some administrators have relied on, and tightens security on Linux systems by locking down its token file.

The core job DavMail does is translation. Exchange and Office 365 speak their own language—Exchange Web Services, or EWS, for the older systems, and Microsoft Graph for the newer ones. But most mail clients, calendar apps, and contact managers speak open standards: IMAP for mail, SMTP for sending, CalDAV for calendars, CardDAV for contacts, and LDAP for directory lookups. DavMail sits in the middle and converts requests from one side to the other. For anyone who wants to escape Outlook's weight but can't escape their company's Exchange mailbox, it's been a lifeline.

Version 7.0.0 is heavily weighted toward Graph. Of seventy changelog entries tagged with Graph improvements, only eighteen touch EWS. The biggest single change is folder delta sync. Until now, every time a mail client checked a folder, DavMail would ask Graph for the entire contents and compare it to what it had seen before. With delta sync enabled by default, DavMail instead asks Graph only what changed since the last check and keeps a cached copy of the folder locally. The result is less data moving across the network and faster checks. The feature was available as an option before—davmail.graph.deltaSync—but now it's on automatically.

The release also handles some of the friction that comes with talking to Microsoft's servers. When Microsoft throttles a client that's making too many requests, it sends back a Retry-After header telling the client how long to wait. DavMail now caps how many times it will retry and can handle a malformed Retry-After header that doesn't follow the standard format. Messages appended over IMAP now preserve their original date, headers, threading, and read status. Meeting responses can now target a single occurrence of a recurring event instead of the whole series.

For contact management, DavMail now returns distribution lists as contact groups that mail clients can display. The project has disabled this feature for Thunderbird, noting it's not yet supported there. A new read-only mode for calendars—davmail.caldavReadonly=true—lets clients view shared calendars without accidentally writing changes back to Exchange.

But there are breaking changes administrators need to know about before upgrading. The davmail.caldavImpersonate setting is gone. DavMail now handles impersonation of shared mailboxes automatically when sending meeting responses from a shared calendar, which simplifies configuration but removes a lever some admins had been using. More importantly, Graph users will need to ensure their Microsoft tenant approves a new permission scope: Calendars.ReadWrite.Shared, which DavMail now requests to reach shared folders. If an admin's tenant restricts which permissions apps can request, they need to explicitly approve this scope before upgrading. Token validation will fail outright if the Mail.ReadWrite permission is missing. The switch from EWS to Graph also forces a fresh sign-in—users won't be able to reuse their old tokens. For organizations with strict permission policies, this is the moment to check the approval list and make sure the new scope is there before anyone upgrades.

DavMail now impersonates the shared mailbox automatically when sending a meeting response from a shared calendar, rather than requiring manual configuration
— DavMail 7.0.0 release notes
Envie de l'histoire complète ? Lire l'original sur helpnetsecurity.com ↗
Nous contacter FAQ