same domain this is to encourage better security practices by forcing users to use HTTPS and a canonical URL. eventually, this is a step towards getting rid of the global /webmail/ alias too. See #170 See #101 See #1080