Re: Cone and TLS

Sam Varshavchik <[email protected]> Sun, 16 Mar 2014 07:59:49 -0400
Newsgroups	gmane.mail.cone
Message-ID	<[email protected]>
Bjcsurf writes:

> I have a few questions about how cone implements TLS.
>
> General:
>
> Does cone support TLS v1.2?

That's up to the TLS library Cone is linked again, which is either gnutls or  
openssl. I know that the current version of GnuTLS supports TLS v1.2, don't  
recall offhand OpenSSL's status.

> IMAP:
>
> When setting up an IMAP account, does " Do not send password in clear
> text" disable 'plain' authentication even after an encrypted TLS
> connection is established -- or only before?

This setting requires CRAM authentication

> Should "Use an encrypted connection" be selected for STARTTLS over port
> 143 -- or only for IMAPS over port 993?

This is IMAPS.

> If the option to use an encrypted connection for IMAP is only for
> IMAPS, how do you require an encrypted connection using STARTTLS for
> IMAP?

STARTTLS is always used automatically if the server supports it. There is no  
need for an explicit option.

> SMTP:
>
> Similar to the above question, does "Do not send SMTP password in clear
> text" disable 'plain' authentication even after an encrypted connection
> has been established -- or only before?
>
> I do not see an option to use an encrypted connection with SMTP. How do
> you require an encrypted connection using STARTTLS for SMTP?

Same thing. STARTTLS is always used automatically, if the server supports  
it, and that other option requires CRAM authentication, and aborts if the  
server does not implement CRAM.

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech

_______________________________________________
Courier-cone mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-cone
signature.asc (application/pgp-signature, 819 B)