We have purchased an SSL certificate for the UMS mail server in order to
enable SSL for POP, IMAP and web clients. We would like to encourage you to
give this support a try and let us know if you run into any problems. For
those of you not familiar with SSL, it is a protocol that allows an encrypted
connection to be set up between two parties with possible authentication of one
or both of the ends.
This secures the mail delivery from the mail server to your client, it does NOT
secure outgoing mail (except in the Web client). Mail traversing the internet
between servers is still unencrypted and people can still forge "From:"
addresses. At some time, we may look into enabling SSL on mail from your mail
client to the server, but that will still leave mail between servers
unencrypted.
For the web interface (IMP), use the following URL (please note the https
rather than the usual http):
https://mail.maine.edu/
This will connect using SSL. If all works as it should, you won't notice
anything except the icon indicating secure connections will be displayed in
your browser. This means that all data sent between your browser and the
mail server will be encrypted. If all goes well, we will make this the
default (and perhaps only) way to use the web based interface to mail.
Some mail clients also support SSL for POP and IMAP connections, we encourage
you to give this a try as well. Instructions for turning this on for some mail
clients follows:
Netscape Messenger 4.7 using IMAP:
Click on "Edit", "Preferences"
Select "Mail Servers" under the "Mail & Newsgroups" sub menu
Select your mail server and click on "Edit"
Select the "IMAP" tab and make sure the "Use secure connection (SSL)"
box is checked.
Click "OK"
Netscape Messager 6 or Mozilla using IMAP
Click on "Edit", then "Mail/News account settings"
Click "Server" under the IMAP mail account.
Check the "Used secure connection (SSL) box"
Click "OK"
Outlook Express and Outlook 2000:
Click on "Tools", "Accounts"
Select your mail account and click "Properties"
Select the "Advanced" tab
Make sure the "This server requires a secure connection (SSL)" box is
checked
Click OK
Eudora (Version 5.1; Sponsored and Paid Modes only)
Version 5.1 of Eudora (a free download from http://www.eudora.com/
available April, 2001) supports SSL streams between Eudora and
SSL capable mail servers. Two modes of SSL are supported by Eudora:
STARTTLS and Alternate SSL Port. However, only "Checking Mail"
(incoming) with "Alternate SSL Port" currently works with our IMAP
server.
Note: If one has multiple Eudora Persona, please see the Eudora
Help topic "SSL" for complete instructions. The following
instructions are appropriate for everyone with a single Persona.
Eudora labels the single Persona (mailbox) "Dominant".
(1) Click "Tools", then "Options...". In the "Category" column on
the left, click "Checking Mail". Change the lower right
drop down box named "Secure Sockets when receiving"
to "Required, Alternate Port". Click "OK".
(2) Do *not* change the "Sending Mail" Category to Alternate Port,
as this will disable sending e-mail. Our IMAP server does not
currently support sending e-mail using SSL.
(3) Stop and restart Eudora.
The following are known NOT to support SSL at this time:
Pegasus, Becky!, Opera
--
Irelann Kerry Anderson phone: (207)581-3508
Systems Group internet [log in to unmask]
UNET (formerly CAPS) Technology Services
University of Maine System
|
