Hello Alexander,

Monday, October 11, 2004, 10:52:52 PM, you wrote:

> There aren't other _good_ ways!

Actually there are other good ways- I will believe you when you say they
are not doctrinal ways- but would question that it is dictated that all
secure pop/imap/smtp servers *must* include full chain when establishing
SSL/TLS connections with clients.

good practice, but not mandatory, right?

for example, I have a small, run from a floppy, secure pop/smtp mailer I
use on the road- and it brings up all the details on the first time a
secure connection is made to pop or smtp server and forces you to view
details, fingerprint of the cert, and permit the connection for that
time or forever. It then makes an MD5 hash of the cert - and will alert
if that info ever changes.

and this info has changed, as was the case with both the us.army.mil and
Cotse servers recently.

That is what I am asking for.  I don't want to be a mindless OE user-
nor do I worry that I will ever get tricked by sites and email servers I
trust.

All I want is for TB! to allow the *user* to make the decision on
whether to permanently allow server cert to be trusted- primarily as I
check these email accounts often and TB! now can hang checking mail when
I don't click Ok or cancel on that popup dialog box.  I actually
consider this a bug, certainly an annoyance that the most configurable
and feature rich client around- even includes x-face and smileys now,
couldn't tweak the code a bit to allow users to decide this.

Thanks for the reply, hopefully it will draw the attention of the
development team and it can be addressed on whether it is a valid and
doable request.

Until then I will just continue to mindlessly click the OK button and
look at my neat smileys in messages that contain them.  :)

-- 
Most Sincerely,
Army RedLeg

running TheBat! Professional 3.0.1 (11OCT04 .msi) on heavily tweaked
Win2ksp4 system


________________________________________________________
 Current beta is 3.0.1 RC/7 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/

Reply via email to