[email protected] writes:
> The two are unrelated. You can use both, or neither. Most IMAP clients will > also let you choose, these days, whether to try to connect to port 993, or > to port 143 and check if the server supports STARTTLS.I thought that TLS is "the new version" of SSL that's why I decided to use it. It turned out that I really wanted SSL. Just to clarify, I'm going to use the following settings: IMAPDSSLSTART=YES IMAPDSTARTTLS=NO Will it encrypt all my connections to :::993? (I don't want to use :::143 at all.)
All connections to port 993 are always encrypted.
Is there a way to check that my traffic is encrypted? Should I use some kind of sniffer? Could you recommend something?
Just make sure that nothing is listening on port 143. Anything that connects to port 993 expects an encrypted connection. Just like anything that connects to the https port expects secure HTTP. Try to open http://mail.google.com:443 (the HTTP port), see how far you get.
Some web servers actually attempt to detect a non-encrypted connection on port 443, and return a page that says that you're full of crap.
But, Courier-IMAP expects to talk SSL or TLS on port 993. It won't accept a plaintext connection.
> It /is/ possible to use an SSL certificate to log in, without a password. > But that's much more complicated to set up, and requires more work. I'd like to use a key plus a passphrase. Is it possible?
You can use a client SSL certificate that's password-protected. This depends on your mail client. Some will ask you for the password when you import it into the client, and decrypt it permanently. Others will ask you for the passphrase every time you use it for a connection.
In either case, you will need to configure Courier to use SSL certificate authentication. As I said, this is a complicated procedure.
pgpgXgf6Orj5X.pgp
Description: PGP signature
------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________ Courier-imap mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap
