Re: IMAP with TLS

2007-05-19 Thread vitalie vrabie
Vilius Šumskas wrote: argh. wasn't it you who tried to brainwash Sierra against that prove-to-be-over-16 quiz in its Leisure Suit Larry game, back in those CGA days? AHAHAHA. Good one :) You made my day. Leisure Suit Larry rocked! errata. IIRC, it's proof-to-be-18+, not over 16;

Re: IMAP with TLS

2007-05-19 Thread Thomas Fernandez
Hello vitalie, On Sat, 19 May 2007 11:56:48 +0300 GMT (19/05/2007, 15:56 +0700 GMT), vitalie vrabie wrote: argh. wasn't it you who tried to brainwash Sierra against that prove-to-be-over-16 quiz in its Leisure Suit Larry game, back in those CGA days? I don't play games, so I don't know what

Re: IMAP with TLS

2007-05-19 Thread vitalie vrabie
Thomas Fernandez wrote: Do you have a website so we can read this dialog? Should be fun. ;-) what for? wanna pass the link to your friends, or what? here it is: http://www.mail-archive.com/tbbeta@thebat.dutaint.com/msg84624.html vv after all… have a nice weekend to you too! Same to

Re: IMAP with TLS

2007-05-19 Thread vitalie vrabie
Thomas Fernandez wrote: I don't play games, so I don't know what this is about. by the way, you'd better do. it's a far less harmful way to explore the wisdoms of life, than to mess up with security/encryption and sensitive data. -- Signed, Vitalie.

Re: IMAP with TLS

2007-05-19 Thread Thomas Fernandez
Hello vitalie, On Sat, 19 May 2007 14:09:35 +0300 GMT (19/05/2007, 18:09 +0700 GMT), vitalie vrabie wrote: Do you have a website so we can read this dialog? Should be fun. vv what for? wanna pass the link to your friends, or what? vv here it is: vv

Re: IMAP with TLS

2007-05-19 Thread vitalie vrabie
Thomas Fernandez wrote: vv errata. IIRC, it's proof-to-be-18+, not over 16; cuz that kid got vv famous for heavily objecting against the question how old is your mom? vv with the answer 36 or more as the correct one. same argumentation vv style was presented: guys, who the hell are you to ask

Re: IMAP with TLS

2007-05-19 Thread Thomas Fernandez
Hello vitalie, On Sat, 19 May 2007 16:45:46 +0300 GMT (19/05/2007, 20:45 +0700 GMT), vitalie vrabie wrote: Sounds like fun to read. vv ah, that one. wasn't quite a dialog. just a story. it was in some paper vv magazine years ago, not sure if it is on the web now. I see. Too bad that we will

Re: IMAP with TLS

2007-05-19 Thread vitalie vrabie
Thomas Fernandez wrote: vv ah, that one. wasn't quite a dialog. just a story. it was in some paper vv magazine years ago, not sure if it is on the web now. I see. Too bad that we will have to close the OT thread now. I smell fish coming. ;-) what fish? one missed sale (a refund to an

Re: IMAP with TLS

2007-05-19 Thread Rick Grunwald
Hello vitalie On Saturday, May 19, 2007 you wrote: will be preferred by any company, than lots of other customers having a pretext to sue it (for letting their underage kids play that game) -- if your nose is in this direction. ... and the fish are starting to SMELL :D -- Rick The Bat

Re: IMAP with TLS

2007-05-18 Thread Thomas Fernandez
Hello vitalie, On Wed, 16 May 2007 20:59:13 +0300 GMT (17/05/2007, 00:59 +0700 GMT), vitalie vrabie wrote: You have really insulted the intelligence of the TB users. If some are stupid enough to click YES, that is *their* problem. Why on earth would you forbid *me* to accept an expired

Re: IMAP with TLS

2007-05-18 Thread Thomas Fernandez
Hello Vilius, On Wed, 16 May 2007 19:01:46 +0300 GMT (16/05/2007, 23:01 +0700 GMT), Vilius Šumskas wrote: So, many people press YES YES ES. So what? What if *I* read the messages? Does the email client have to nanny me because your grandmother doesn't read them? VŠ Does my grandmother have

Re: IMAP with TLS

2007-05-18 Thread Thomas Fernandez
Hello Vilius, On Thu, 17 May 2007 09:55:34 +0300 GMT (17/05/2007, 13:55 +0700 GMT), Vilius Šumskas wrote: VŠ So IMHO in nowadays world where everyone has at least stable VŠ 128kbps POP3 is a legacy. Where did you get these statistics from? In fact, I don't know anybody over here who uses IMAP,

Re: IMAP with TLS

2007-05-18 Thread vitalie vrabie
Thomas Fernandez wrote: vv treat it as an exam question: what is the difference between security vv and encryption? I don't take exam questions from you, but it has already been answered in the meantime anyway. ;-) vv if you answer correctly, you qualify for such decisions. ;) It's not up

Re: IMAP with TLS

2007-05-18 Thread Vilius Šumskas
Thomas Fernandez wrote: vv treat it as an exam question: what is the difference between security vv and encryption? I don't take exam questions from you, but it has already been answered in the meantime anyway. vv if you answer correctly, you qualify for such decisions. It's not up

Re: IMAP with TLS

2007-05-17 Thread Vilius Šumskas
Gary [EMAIL PROTECTED] rašė: Hi Vilius, On Wed, 16 May 2007 23:08:18 +0300 UTC (5/16/2007, 3:08 PM -0500 UTC my time), Vilius Šumskas wrote: V But it is very security sensitive decision. Let's say you are V competent to make it, let's say I'm, most of IT guys are too. agreed. V But what

Re: IMAP with TLS

2007-05-17 Thread vitalie vrabie
Gary wrote: v treat it as an exam question: what is the difference between security v and encryption? A. I can log into any POP server that I am a registered user using the standard port 110. I must authenticate to get into the server to get my mail. B. I can log into any POPS server that

Re: IMAP with TLS

2007-05-17 Thread vitalie vrabie
Gary wrote: To put it another way, if I can connect to a server via POP or IMAP, after I authenticate, why will it not let me connect securely, when I can connect normally. It should be my choice, since I can connect anyway. Does that not makes sense? no, it doesn't make sense. since you

Re: IMAP with TLS

2007-05-17 Thread vitalie vrabie
vitalie vrabie wrote: by the way, where are you from? i think of moving to that country, if true are your claims that ignorance on essential things does still qualify to make a living on it... addendum (to make my point clear, so it won't look as an offense, because it's actually not): i'm

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Gary [EMAIL PROTECTED] rašė: Hi Vilius, On Wed, 16 May 2007 00:47:05 +0300 UTC (5/15/2007, 4:47 PM -0500 UTC my time), Vilius Šumskas wrote: because TB! is the only client on the face of the planet which will not allow you to accept an expired cert, you have to install Stunnel and configure

Re: IMAP with TLS

2007-05-16 Thread Gary
On Wed, May 16, 2007 at 07:51:38AM +0300 or thereabouts, vitalie vrabie wrote: Gary wrote: decisions if I want to accept a cert or not. Jumping through hoops to get to an IMAP server, after you used Stunnel a few 1000 times, is just a pain - unnecessary I might add. It is just easier to

Re: IMAP with TLS

2007-05-16 Thread Gary
On Wed, May 16, 2007 at 09:32:43AM +0300 or thereabouts, Vilius ??umskas wrote: 2. Here is where your above statement is flawed. In order to log in your server, you have to AUTHENTICATE you must provide a password or in combo with CRAM-MD5 or some such, although it could be plain.

Re: IMAP with TLS

2007-05-16 Thread Thomas Fernandez
Hello Vilius, On Wed, 16 May 2007 00:47:05 +0300 GMT (16/05/2007, 04:47 +0700 GMT), Vilius Šumskas wrote: because TB! is the only client on the face of the planet which will not allow you to accept an expired cert, you have to install Stunnel and configure it manually, then open up that

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Hello Thomas, Wednesday, May 16, 2007, 4:40:20 AM, you wrote: V� Actually this is very good decision. Many users just don't read what's V� written on every popup. They press YES YES YES. While I don't use IMAP, this was the most ridiculous reply I've seen on this list for a long while. So,

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
They just want to send and recieve mail, it's our (admins) job to make it work. And thanks Ritlabs making this job easier! Current beta is 3.99.06 | 'Using TBBETA' information: http://www.silverstones.com/thebat/TBUDLInfo.html

Re: IMAP with TLS

2007-05-16 Thread vitalie vrabie
Thomas Fernandez wrote: You have really insulted the intelligence of the TB users. If some are stupid enough to click YES, that is *their* problem. Why on earth would you forbid *me* to accept an expired certificate, if I so choose? treat it as an exam question: what is the difference

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Vitalie, On Wed, 16 May 2007 20:59:13 +0300 UTC (5/16/2007, 12:59 PM -0500 UTC my time), vitalie vrabie wrote: You have really insulted the intelligence of the TB users. If some are stupid enough to click YES, that is *their* problem. Why on earth would you forbid *me* to accept an

Re: IMAP with TLS

2007-05-16 Thread Marek Mikus
Hello all, Wednesday, May 16, 2007, Gary wrote: B and D only allows me to send and receive packets securely. Since I still can into the server by authentication using A and C, what difference does it make? Answer:NONE so do You understand what is difference between

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Marek, On Wed, 16 May 2007 21:01:35 +0200 UTC (5/16/2007, 2:01 PM -0500 UTC my time), Marek Mikus wrote: B and D only allows me to send and receive packets securely. Since I still can into the server by authentication using A and C, what difference does it make? Answer:

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Hello Vili, Wednesday, May 16, 2007, 8:37:00 PM, you wrote: They just want to send and recieve mail, it's our (admins) job to make it work. And thanks Ritlabs making this job easier! Let me rephrase the discussion here: Ritlabs does a good job following the rules, while other email

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Hello Gary, Wednesday, May 16, 2007, 10:24:48 PM, you wrote: M BTW if B and D allows You secure packets *only*, why You need it? ding, ding, ding. We have a winner here.. the answer is You don't need it! and .. since you do not need it to get(POP) or see (IMAP) your mail on

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Vilius, On Wed, 16 May 2007 22:33:53 +0300 UTC (5/16/2007, 2:33 PM -0500 UTC my time), Vilius Šumskas wrote: You don't need it! and .. since you do not need it to get(POP) or see (IMAP) your mail on the server, which can only be done with authentication in the first place, the choice

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Hello Gary, Wednesday, May 16, 2007, 5:33:01 PM, you wrote: 4. Every other email client allows the user to choose whether he wishes to accept a cert, any cert for IMAP. I'm a grown up guy, and I can make my own decisions if I want to accept a cert or not. Jumping through hoops to get to an

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Hello Gary, Wednesday, May 16, 2007, 10:43:37 PM, you wrote: Hi Vilius, On Wed, 16 May 2007 22:33:53 +0300 UTC (5/16/2007, 2:33 PM -0500 UTC my time), Vilius Šumskas wrote: You don't need it! and .. since you do not need it to get(POP) or see (IMAP) your mail on the server, which can

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Vilius, On Wed, 16 May 2007 22:45:36 +0300 UTC (5/16/2007, 2:45 PM -0500 UTC my time), Vilius Šumskas wrote: read up on DNS. Have you ever built DNS servers professionally, or maintained at least one? Do you understand how it works. Have you ever built email/IMAP/POP servers

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Hello Gary, Wednesday, May 16, 2007, 10:43:37 PM, you wrote: It is a problem in TB! because TB! will not allow the user to accept a cert. It makes that decision for him/her, and that answer is always no, you cannot connect (if the cert is outdated).. But it is very security sensitive

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Hello Gary, Wednesday, May 16, 2007, 11:04:55 PM, you wrote: V You don't need to redirect user data for this. Simply own a V server/router in between, create a certificate and make the server V transparent. Great, easily done, now how do you get my (or anyone's) password into your fake IMAP

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Vilius, On Wed, 16 May 2007 23:19:06 +0300 UTC (5/16/2007, 3:19 PM -0500 UTC my time), Vilius Šumskas wrote: V You don't. You will authentificate to your real server. But as my V router/imap server will be transparent you will never know this. V For example on Linux it is done like this: V

Re: IMAP with TLS

2007-05-16 Thread Vilius Šumskas
Hello Gary, Wednesday, May 16, 2007, 11:51:06 PM, you wrote: V You don't. You will authentificate to your real server. But as my V router/imap server will be transparent you will never know this. V For example on Linux it is done like this: V iptables -A PREROUTING -d myserveripfromvictimside

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Vilius, On Wed, 16 May 2007 22:56:09 +0300 UTC (5/16/2007, 2:56 PM -0500 UTC my time), Vilius Šumskas wrote: To put it another way, if I can connect to a server via POP or IMAP, after I authenticate, why will it not let me connect securely, when I can connect normally. It should be my

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Vilius, On Wed, 16 May 2007 23:08:18 +0300 UTC (5/16/2007, 3:08 PM -0500 UTC my time), Vilius Šumskas wrote: V But it is very security sensitive decision. Let's say you are V competent to make it, let's say I'm, most of IT guys are too. agreed. V But what about my mom, your little sister,

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Maxim, On Thu, 17 May 2007 00:09:16 +0300 UTC (5/16/2007, 4:09 PM -0500 UTC my time), Maxim Masiutin wrote: M TLS assures confidentiality and integrity of the information. M Confidentiality means that nobody in transit (that has access to the M data channel) can read your messages while

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Maxim, On Thu, 17 May 2007 00:13:07 +0300 UTC (5/16/2007, 4:13 PM -0500 UTC my time), Maxim Masiutin wrote: It is a problem in that it is a matter of convenience to the user. Where the user can always connect otherwise using a standard connection on 143 (in most cases, depending if the IMAP

Re: IMAP with TLS

2007-05-16 Thread Gary
Hi Vilius, On Thu, 17 May 2007 00:01:31 +0300 UTC (5/16/2007, 4:01 PM -0500 UTC my time), Vilius Šumskas wrote: V You'll be suprised how many people send their banking passwords, V social numbers and credit card information through email :) hee, hee... no I would not :) also medical

Re: IMAP with TLS

2007-05-15 Thread Gary
On Tue, May 15, 2007 at 02:51:36PM -0400 or thereabouts, Vili wrote: Is there anybody using IMAP with TLS on the 993 port? I only use SSL with IMAP, port 993. There is this IMAP server: www.citymarket.hu With telnet, I see that the 993 port is open, Thunderbird, OE can connect to it with

Re: IMAP with TLS

2007-05-15 Thread Vilius Šumskas
Hello Vili, Tuesday, May 15, 2007, 9:51:36 PM, you wrote: Is there anybody using IMAP with TLS on the 993 port? Yes, works fine here. There is this IMAP server: www.citymarket.hu With telnet, I see that the 993 port is open, Thunderbird, OE can connect to it with SSL. TB says:

Re: IMAP with TLS

2007-05-15 Thread Vilius Šumskas
Hello Gary, Wednesday, May 16, 2007, 12:34:55 AM, you wrote: because TB! is the only client on the face of the planet which will not allow you to accept an expired cert, you have to install Stunnel and configure it manually, then open up that first, then use TB! for that server. You see the

Re: IMAP with TLS

2007-05-15 Thread Gary
Hi Vilius, On Wed, 16 May 2007 00:47:05 +0300 UTC (5/15/2007, 4:47 PM -0500 UTC my time), Vilius Šumskas wrote: because TB! is the only client on the face of the planet which will not allow you to accept an expired cert, you have to install Stunnel and configure it manually, then open up

Re: IMAP with TLS

2007-05-15 Thread vitalie vrabie
Gary wrote: decisions if I want to accept a cert or not. Jumping through hoops to get to an IMAP server, after you used Stunnel a few 1000 times, is just a pain - unnecessary I might add. It is just easier to use another client. ...or another server. after all, will you trust servers with

Re: IMAP with TLS

2006-03-16 Thread Alexey N. Vinogradov
Hello, harlekin. You wrote 16.03.2006 @ 21:45 in mid:[EMAIL PROTECTED] using mailer: The Bat! (v3.72.02 (Beta)) Professional hhed Has anybody experienced problems with this? hhed Iґm trying to get IMAP with TLS working. ... hhed 16.03.2006, 16:28:13: SEND - WARNUNG: Es wurde keine