Re: I can no longer use TLS for Windows7 and Outlook

2020-06-03 Thread Luuk
On 31-5-2020 06:36, Mark Constable wrote: I currently use Ubuntu 20.04 with Dovecot 2.3.7.2 and OpenSSL 1.1.1f. A few months ago there was an update to all these systems and since then I've had to talk W7 and old Mac clients through disabling ports 993/995 with TLS enabled back to ports

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread Benny Pedersen
On 2020-05-31 11:11, Kostya Vasilyev wrote: In terms of Dovecot ciphers config, Windows should be happy with TLS_RSA_WITH_3DES_EDE_CBC_SHA which is less broken than the other older ciphers. lets hope that dovecot allow tls1 and still can disable tls1.1, tls 1.1 is weaker then tls 1.0

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread Kostya Vasilyev
On 5/31/20 11:54 AM, Aki Tuomi wrote: On 31/05/2020 07:36 Mark Constable > wrote: I currently use Ubuntu 20.04 with Dovecot 2.3.7.2 and OpenSSL 1.1.1f. A few months ago there was an update to all these systems and since then I've had to talk W7 and old Mac clients

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread Aki Tuomi
On 31/05/2020 07:36 Mark Constable wrote: I currently use Ubuntu 20.04 with Dovecot 2.3.7.2 and OpenSSL 1.1.1f. A few months ago there was an update to all these systems and since

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread @lbutlr
On 30 May 2020, at 22:36, Mark Constable wrote: > 993/995 with TLS enabled back to ports 143/110 without SSL or they > could not pick up email. Thunderbird users (ie; me) were unaffected. Insecure mail login is far too risky to allow. I don't even allow it within a LAN. > Could anyone share a

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread Christian Kivalo
On May 31, 2020 6:36:52 AM GMT+02:00, Mark Constable wrote: >I currently use Ubuntu 20.04 with Dovecot 2.3.7.2 and OpenSSL 1.1.1f. > >A few months ago there was an update to all these systems and since >then I've had to talk W7 and old Mac clients through disabling ports >993/995 with TLS