Hi Kevin and list,

On Tuesday, May 24, 2005 at 10:37:12 GMT -0400 (which was 16:37 where
I live) Kevin Coates wrote (at least in parts) and made these valuable
points on the subject of "TLS Failure":


> My ISP uses an Equifax Secure Global Certificate which I've installed
> in my Address Book under Trusted Root CA.

for which hostname is this certificate issued? I'd bet the hostname
is _not_ mail.kcoates.com. I have this very problem with my hoster's
certificate, which is issued for my hoster's mail server. So I have
to use mail.<hoster's server> instead of mail.<mydomain>. The two are
in fact the same server (or the same mail program on the same server in
fact.)

> If I use Thunderbird or The Bat!/GPGrelay, I am allowed to use this 
> certificate
> and establish the secured connection.

I guess they do not verify the certificate's server name, which seems
like a flaw to me.

> The Bat! gives me no options and won't allow a connection.

I'd like to have an option for the server's name in the certificate.
That would solve our problem at once.

> Has anyone else seen this and figured out a solution?

see above :-)

-- 
Regards
Michael

powered by The BAT! 3.5.0.11, , and MyMacros 1.11a
with usual problems of Windows 2000  Pro 5.0 Build 2195 Service Pack 4


________________________________________________________
 Current beta is (none) | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/

Reply via email to