Outlook Express and STARTTLS
Oscar del Rio
delrio at mie.utoronto.ca
Sat Nov 22 14:56:03 UTC 2014
On 21/11/2014 5:50 PM, Reindl Harald wrote:
> Am 21.11.2014 um 23:35 schrieb Oscar del Rio:
>> On 11/21/14 04:29 PM, Reindl Harald wrote:
>>> the situation for Outlook (not OE) and TLS is not much better
>>> some versions support STARTTLS on SMTP but not for IMAP/POP3 ...
>> Outlook (at least since version 2010) does support STARTTLS for
>> IMAP/POP3 on port 143.
>> But they don't call it STARTTLS but "TLS". And they call "SSL" to TLS on
>> port 993/995
>> With Outlook configured for "TLS" on port 143:
>> outlook -> dovecot: a0gk CAPABILITY
>> dovecot -> outlook: * CAPABILITY IMAP4rev1...STARTTLS...
>> outlook -> dovecot: h96q STARTTLS
>> dovecot -> outlook: h96q OK Begin TLS negotiation now
>> (TLS starts)
> for IMAP yes
> for POP *no*
> try it out - i have testing VM's for Outlook 2003/2007/2010 and on all
> of them IMAP/POp3 accounts
You are right. I hadn't tested POP3.
I just tested Outlook 2013; no STARTTLS for POP.
(I assumed that if they implemented STARTTLS for IMAP they would have
also done it for POP... wrong assumption!).
> hence it is a crap but that fact don't solve the problem that you need
> to support all ports and encryptions on the server side
More information about the dovecot