Pegasus Mail & Mercury

Welcome to the Community for Pegasus Mail and
The Mercury Mail Transport System, the Internet's longest-serving PC e-mail system!
Welcome to Pegasus Mail & Mercury Sign in | Join | Help
in
Home Blogs Forums Downloads Pegasus Mail Overview Mercury Overview Wiki

Fastmail SSL changes - now Pegasus will not connect

Last post 05-13-2015, 16:56 by Kilmolin. 8 replies.
Sort Posts: Previous Next
  •  11-19-2009, 19:05

    • aderoy is not online. Last active: 01-24-2020, 17:22 aderoy
    • Top 50 Contributor
    • Joined on 05-09-2007
    • Participant
    • Points 2,600

    Fastmail SSL changes - now Pegasus will not connect

    Seems earlier this week Fastmail has changed the SSL version causing Pegasus to fail if SSL (or TLS) to connect, dropping down to nonsecure (IMAP port 143) it works.

    Reading the blog:

    -------------

    SSL security updated
    November 18, 2009 — Rob Mueller

    Due to a recently discovered SSL man-in-the-middle flaw, I’ve upgraded our web, IMAP and POP proxy servers to disable SSL renegotiation.

    At the same time, I’ve disabled SSLv2 protocol (it’s been deprecated 1996) and disabled all “LOW” and “EXPORT” ciphers.

    In theory, there should be no user visible changes, but some very, very old email clients or browsers may experience problems. Unfortunately in those cases, people are either going to have to use non-SSL access, or upgrade their email client/browser to a newer version.

    ---------------

    Reading the blog and forums for Fastmail I was able to find this tidbit:

    Try changing the hostname to insecuressl.messagingengine.com. We've added a couple of extra IP addresses and configured that hostname with SSLv2 support.

    -----------------

    Hopefully the SSL issue can be addressed by David.

    Using Mulberry I was able to connect to the site via the mail.messagingengine.com address via IMAP port 993. Firewall was not changed (allows Pegasus on the SSL and non SSL ports to the mail server).


    If anyone else has an idea how to configure Pegasus that would be great.

    Thank you


    Filed under:
  •  11-19-2009, 19:59

    Re: Fastmail SSL changes - now Pegasus will not connect

    > If anyone else has an idea how to configure Pegasus that would be great.

    What I did was fallback to a non-SSL connection. All my mail goes through all sorts non-secure connections anyway and SSL is no big deal.


    Thomas R. Stephenson
    San Jose, California
    Member of Pegasus Mail Support Team

    I do not answer private messages from the forum. If you want to contact me use email to techsupp@tstephenson.com.
  •  11-20-2009, 16:26

    Re: Fastmail SSL changes - now Pegasus will not connect

    Thomas R. Stephenson:

    What I did was fallback to a non-SSL connection. All my mail goes through all sorts non-secure connections anyway and SSL is no big deal.

    If SSL is not important, why bother with all the extra code in Pegasus Mail?


    __
    Oceanside, CA USA
  •  11-20-2009, 17:48

    Re: Fastmail SSL changes - now Pegasus will not connect

    SSL use is definitely important, like when using an insecure network at work to read your mail or a in a country that monitors access.

    the non ssl work around means other people can get your password easy if you are using an untrusted network with people sniffing.

    Thanks for the  insecuressl.messagingengine.com workaround, I got that working.

    hope it can be addressed soon, to bring pegasus into line with other mail clients.

    For me, Pegasus not connecting to modern SSL servers would make me mover to another client.


  •  11-20-2009, 17:51

    Re: Fastmail SSL changes - now Pegasus will not connect

    If SSL is not important, why bother with all the extra code in Pegasus Mail?

     It's not that important to me when using a free email system since neither the data or the account is all that important.  The real problem with FastMail is their inability to support the standard as it was written.  GMail and Yahoo seem to be able to handle this a lot better.

    Think about it though, the only thing you are protecting with a system like FastMail is the username and password, everything else is going to be passed  in the clear to the next system down the line.  ;-)

     


    Thomas R. Stephenson
    San Jose, California
    Member of Pegasus Mail Support Team

    I do not answer private messages from the forum. If you want to contact me use email to techsupp@tstephenson.com.
  •  11-20-2009, 18:29

    Re: Fastmail SSL changes - now Pegasus will not connect

    > For me, Pegasus not connecting to modern SSL servers would make me
    > mover to another client.

    Are GMail and Yahoo modern servers?  This is a problem with Fastmail not supporting a valid secure protocol. 

    The workaround the FastMail has provided does not even support STARTTLS but only direct SSL and that one have been depreciated for years.

     


    Thomas R. Stephenson
    San Jose, California
    Member of Pegasus Mail Support Team

    I do not answer private messages from the forum. If you want to contact me use email to techsupp@tstephenson.com.
  •  11-21-2009, 15:17

    Re: Fastmail SSL changes - now Pegasus will not connect

    Thomas R. Stephenson:

    > For me, Pegasus not connecting to modern SSL servers would make me
    > mover to another client.

    Are GMail and Yahoo modern servers?  This is a problem with Fastmail not supporting a valid secure protocol. 

    The workaround the FastMail has provided does not even support STARTTLS but only direct SSL and that one have been depreciated for years.

     

    Thomas, thanks for your help.  Does "depreciated" mean that the protocol's value or trust has been lowered?


    __
    Oceanside, CA USA
  •  11-21-2009, 17:19

    Re: Fastmail SSL changes - now Pegasus will not connect

    Thomas, thanks for your help.  Does "depreciated" mean that the protocol's value or trust has been lowered?

    It means that that the server and client developers should be supporting TLS instead of SSL since the new protocol has now been considered a standard.  Does not necessarily mean that the SSL is more or less secure than TLS.

     


    Thomas R. Stephenson
    San Jose, California
    Member of Pegasus Mail Support Team

    I do not answer private messages from the forum. If you want to contact me use email to techsupp@tstephenson.com.
  •  05-13-2015, 16:56

    • Kilmolin is not online. Last active: 06-20-2018, 12:45 Kilmolin
    • Top 500 Contributor
    • Joined on 12-17-2013
    • Member
    • Points 205

    Re: Fastmail SSL changes - now Pegasus will not connect

    Several years old but...

    Like many fastmail users, I changed to insecuressl.messagingengine.com for POP3/IMAP/SMTP to overcome SSL issues. Pegasus 4.70 now works with mail.messagingengine.com & SSL.

    Well done to the Pegasus team.

View as RSS news feed in XML

Contact | Advertise | Host provider: PraktIT | Terms of Use | Privacy Statement
Copyright © 2007-2011 David Harris / Peter Strömblad. | Pegasus Mail Home Page