Unfortunately I do.  I've requested access to the beta.  Thanks!

<p>I'm running Mercury 4.80.</p><p><span style="font-size: 10pt;">ScanMyServer.com is reporting the following items with Mercury.  I have weak authenticators disabled unless SSL-secured, but is there a way to go a step further and address these?</span></p><p><span style="font-size: 10pt;">Thanks </span></p><p> </p><div class="timeline-item clearfix" style="box-sizing: border-box; position: relative; margin-bottom: 8px; color: rgb(57, 57, 57); font-family: Roboto, sans-serif; font-size: 13px;"><div class="widget-box" style="box-sizing: border-box; box-shadow: none; padding: 0px; margin: 0px 0px 0px 60px; border: 1px solid rgb(204, 204, 204); background-color: rgb(243, 243, 243); color: rgb(97, 97, 97); position: relative; max-width: none;"><div class="widget-header header-color-orange widget-header-small" style="box-sizing: content-box; position: relative; min-height: 31px; background: linear-gradient(rgb(255, 255, 255) 0px, rgb(238, 238, 238) 100%) repeat-x rgb(247, 247, 247); color: rgb(102, 159, 199); border-bottom: 1px solid rgb(221, 221, 221); padding-left: 10px;"><h5 class="smaller" style="box-sizing: border-box; font-family: 'Open Sans', 'Helvetica Neue', Helvetica, Arial, sans-serif; font-weight: 400; line-height: 1.1; color: inherit; margin-top: 10px; margin-bottom: 10px; font-size: 14px;">Sweet32 Birthday Attacks on 64-bit Block Ciphers in TLS and OpenVPN (DES-CBC3)</h5><span class="widget-toolbar" style="box-sizing: border-box; display: inline-block; padding: 0px 10px; line-height: 29px; float: right; position: relative;"><a data-action="collapse" style="box-sizing: border-box; background-color: transparent; color: rgb(170, 170, 170); text-decoration-line: none; font-size: 14px; margin: 0px 1px; display: inline-block; padding: 0px; line-height: 24px; cursor: pointer; transition: transform 0.1s ease 0s;" href="https://scanmyserver.com/my_account/?#"><span class="ace-icon fa fa-chevron-up" style="box-sizing: border-box; display: inline-block; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: 1; font-family: FontAwesome; font-size: inherit; text-rendering: auto; -webkit-font-smoothing: antialiased; text-align: center; margin-right: 0px;"></span></a></span></div><div class="widget-body" style="box-sizing: border-box; background-color: transparent;"><div class="widget-main" style="box-sizing: border-box; padding: 12px; margin: 0px; position: relative; max-width: none; border-bottom-width: 0px;"><dl id="dt-list-1" class="dl-horizontal" style="box-sizing: border-box; margin-top: 0.5em; margin-bottom: 1em;"><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Summary</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">This test detects SSL ciphers DES-CBC3 supported by the remote service for encrypting communications.<br style="box-sizing: border-box;"><br style="box-sizing: border-box;"><div class="output" style="box-sizing: border-box; overflow: auto; padding: 0.5em; border: 1px solid;">Weak Cipher DES-CBC3 found: (Cipher: DES-CBC3-SHA|SSLv3|Kx=RSA|Au=RSA|Enc=3DES(168)|Mac=SHA1) (Cipher: DES-CBC3-SHA|TLSv1|Kx=RSA|Au=RSA|Enc=3DES(168)|Mac=SHA1)</div></dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Port</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">imaps (993/tcp)</dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Solution</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">See solution found at: <a target="_blank" rel="nofollow" style="box-sizing: border-box; background-color: transparent; color: rgb(51, 122, 183); text-decoration-line: none; cursor: pointer;" href="https://www.openssl.org/blog/blog/2016/08/24/sweet32/">https://www.openssl.org/blog/blog/2016/08/24/sweet32/</a></dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">External sources</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;"><a target="_blank" rel="nofollow" style="box-sizing: border-box; background-color: transparent; color: rgb(51, 122, 183); text-decoration-line: none; cursor: pointer;" href="https://sweet32.info/">https://sweet32.info/</a></dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">CVE</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;"><a target="_new" style="box-sizing: border-box; background-color: transparent; color: rgb(51, 122, 183); text-decoration-line: none; cursor: pointer;" href="http://www.securiteam.com/cgi-bin/cve.pl?cve=CVE-2016-2183">CVE-2016-2183</a></dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Test ID</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">19146</dd></dl></div></div></div></div><div class="timeline-item clearfix" style="box-sizing: border-box; position: relative; margin-bottom: 8px; color: rgb(57, 57, 57); font-family: Roboto, sans-serif; font-size: 13px;"> </div><div class="timeline-item clearfix" style="box-sizing: border-box; position: relative; margin-bottom: 8px; color: rgb(57, 57, 57); font-family: Roboto, sans-serif; font-size: 13px;"><div class="timeline-info" style="box-sizing: border-box; float: left; width: 60px; text-align: center; position: relative;"><i class="timeline-indicator icon-circle btn btn-warning no-hover" style="box-sizing: border-box; display: inline-block; padding: 0px; margin: 0px; font-size: 16px; line-height: 30px; white-space: nowrap; vertical-align: middle; touch-action: manipulation; cursor: default; user-select: none; border-radius: 100%; transition: background-color 0.15s ease 0s, border-color 0.15s ease 0s, opacity 0.15s ease 0s; position: relative; opacity: 1; height: 36px; width: 36px; background-image: none !important; border: 3px solid rgb(255, 255, 255) !important; color: rgb(255, 255, 255) !important; background-color: rgb(255, 183, 82) !important; text-shadow: none !important; box-shadow: none !important;"></i></div><div class="widget-box" style="box-sizing: border-box; box-shadow: none; padding: 0px; margin: 0px 0px 0px 60px; border: 1px solid rgb(204, 204, 204); background-color: rgb(243, 243, 243); color: rgb(97, 97, 97); position: relative; max-width: none;"><div class="widget-header header-color-orange widget-header-small" style="box-sizing: content-box; position: relative; min-height: 31px; background: linear-gradient(rgb(255, 255, 255) 0px, rgb(238, 238, 238) 100%) repeat-x rgb(247, 247, 247); color: rgb(102, 159, 199); border-bottom: 1px solid rgb(221, 221, 221); padding-left: 10px;"><h5 class="smaller" style="box-sizing: border-box; font-family: 'Open Sans', 'Helvetica Neue', Helvetica, Arial, sans-serif; font-weight: 400; line-height: 1.1; color: inherit; margin-top: 10px; margin-bottom: 10px; font-size: 14px;">SSL Medium Strength Cipher Suites Supported</h5><span class="widget-toolbar" style="box-sizing: border-box; display: inline-block; padding: 0px 10px; line-height: 29px; float: right; position: relative;"><a data-action="collapse" style="box-sizing: border-box; background-color: transparent; color: rgb(170, 170, 170); text-decoration-line: none; font-size: 14px; margin: 0px 1px; display: inline-block; padding: 0px; line-height: 24px; cursor: pointer; transition: transform 0.1s ease 0s;" href="https://scanmyserver.com/my_account/?#"><span class="ace-icon fa fa-chevron-up" style="box-sizing: border-box; display: inline-block; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: 1; font-family: FontAwesome; font-size: inherit; text-rendering: auto; -webkit-font-smoothing: antialiased; text-align: center; margin-right: 0px;"></span></a></span></div><div class="widget-body" style="box-sizing: border-box; background-color: transparent;"><div class="widget-main" style="box-sizing: border-box; padding: 12px; margin: 0px; position: relative; max-width: none; border-bottom-width: 0px;"><dl id="dt-list-1" class="dl-horizontal" style="box-sizing: border-box; margin-top: 0.5em; margin-bottom: 1em;"><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Summary</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">The remote host supports the use of SSL ciphers that offer medium strength encryption, which we currently regard as those with key lengths at least 56 bits and less than 112 bits.<br style="box-sizing: border-box;"><br style="box-sizing: border-box;"><div class="output" style="box-sizing: border-box; overflow: auto; padding: 0.5em; border: 1px solid;">Here is the only medium strength SSL cipher supported by the remote server:<br style="box-sizing: border-box;">* Medium Strength Ciphers (>= 56-bit and < 112-bit key)<br style="box-sizing: border-box;">* SSLv3 - DES-CBC-SHA Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1 <br style="box-sizing: border-box;">* TLSv1 - DES-CBC-SHA Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1 <br style="box-sizing: border-box;">The fields above are:<br style="box-sizing: border-box;">* {OpenSSL ciphername}<br style="box-sizing: border-box;">* Kx={key exchange}<br style="box-sizing: border-box;">* Au={authentication}<br style="box-sizing: border-box;">* Enc={symmetric encryption method}<br style="box-sizing: border-box;">* Mac={message authentication code}<br style="box-sizing: border-box;">* {export flag}</div></dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Port</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">imaps (993/tcp)</dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Solution</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">Reconfigure the affected application if possible to avoid use of medium strength ciphers.</dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">External sources</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;"><a target="_blank" rel="nofollow" style="box-sizing: border-box; background-color: transparent; color: rgb(51, 122, 183); text-decoration-line: none; cursor: pointer;" href="http://support.microsoft.com/kb/245030">http://support.microsoft.com/kb/245030</a></dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Test ID</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">12076</dd></dl></div></div></div></div><div class="timeline-item clearfix" style="box-sizing: border-box; position: relative; margin-bottom: 8px; color: rgb(57, 57, 57); font-family: Roboto, sans-serif; font-size: 13px;"><div class="timeline-info" style="box-sizing: border-box; float: left; width: 60px; text-align: center; position: relative;"><i class="timeline-indicator icon-circle btn btn-warning no-hover" style="box-sizing: border-box; display: inline-block; padding: 0px; margin: 0px; font-size: 16px; line-height: 30px; white-space: nowrap; vertical-align: middle; touch-action: manipulation; cursor: default; user-select: none; border-radius: 100%; transition: background-color 0.15s ease 0s, border-color 0.15s ease 0s, opacity 0.15s ease 0s; position: relative; opacity: 1; height: 36px; width: 36px; background-image: none !important; border: 3px solid rgb(255, 255, 255) !important; color: rgb(255, 255, 255) !important; background-color: rgb(255, 183, 82) !important; text-shadow: none !important; box-shadow: none !important;"></i></div><div class="widget-box" style="box-sizing: border-box; box-shadow: none; padding: 0px; margin: 0px 0px 0px 60px; border: 1px solid rgb(204, 204, 204); background-color: rgb(242, 246, 249); color: rgb(89, 92, 102); position: relative; max-width: none;"><div class="widget-header header-color-orange widget-header-small" style="box-sizing: content-box; position: relative; min-height: 31px; background: linear-gradient(rgb(255, 255, 255) 0px, rgb(238, 238, 238) 100%) repeat-x rgb(247, 247, 247); color: rgb(102, 159, 199); border-bottom: 1px solid rgb(221, 221, 221); padding-left: 10px;"><h5 class="smaller" style="box-sizing: border-box; font-family: 'Open Sans', 'Helvetica Neue', Helvetica, Arial, sans-serif; font-weight: 400; line-height: 1.1; color: inherit; margin-top: 10px; margin-bottom: 10px; font-size: 14px;">Deprecated SSL Protocol Usage</h5><span class="widget-toolbar" style="box-sizing: border-box; display: inline-block; padding: 0px 10px; line-height: 29px; float: right; position: relative;"><a data-action="collapse" style="box-sizing: border-box; background-color: transparent; color: rgb(170, 170, 170); text-decoration-line: none; font-size: 14px; margin: 0px 1px; display: inline-block; padding: 0px; line-height: 24px; cursor: pointer; transition: transform 0.1s ease 0s;" href="https://scanmyserver.com/my_account/?#"><span class="ace-icon fa fa-chevron-up" style="box-sizing: border-box; display: inline-block; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; line-height: 1; font-family: FontAwesome; font-size: inherit; text-rendering: auto; -webkit-font-smoothing: antialiased; text-align: center; margin-right: 0px;"></span></a></span></div><div class="widget-body" style="box-sizing: border-box; background-color: transparent;"><div class="widget-main" style="box-sizing: border-box; padding: 12px; margin: 0px; position: relative; max-width: none; border-bottom-width: 0px;"><dl id="dt-list-1" class="dl-horizontal" style="box-sizing: border-box; margin-top: 0.5em; margin-bottom: 1em;"><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Summary</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">The remote service accepts connections encrypted using SSLv2 and/or SSLv3, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients.<br style="box-sizing: border-box;"><br style="box-sizing: border-box;"><div class="output" style="box-sizing: border-box; overflow: auto; padding: 0.5em; border: 1px solid;">SSLv3</div></dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Port</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">imaps (993/tcp)</dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Solution</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">Consult the application's documentation to disable SSL 2.0 and SSL 3.0, and use TLS 1.0 or newer.</dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">External sources</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;"><a target="_blank" rel="nofollow" style="box-sizing: border-box; background-color: transparent; color: rgb(51, 122, 183); text-decoration-line: none; cursor: pointer;" href="http://www.schneier.com/paper-ssl.pdf">http://www.schneier.com/paper-ssl.pdf</a></dd><dt style="box-sizing: border-box; line-height: 1.42857; font-weight: 700; float: left; width: 160px; overflow: hidden; clear: left; text-align: right; text-overflow: ellipsis; white-space: nowrap;">Test ID</dt><dd style="box-sizing: border-box; line-height: 1.42857; margin-left: 180px; padding-left: 1em;">9329</dd></dl></div></div></div></div><p><span style="font-size: 10pt;"> </span></p>

<p>In the configuration of the IMAP Server on SSL tab you have enabled (depreciated) direct-connect-SSL on port 993. Disable it after changing the mailclient(s) to TLS / StartTLS on Port 143. Should at least resolv problem 3.</p><p>The others I don't know ...</p><p>bye    Olaf</p><p> </p>

Do you really need imap-access from the world? If not then i suggest to use a vpn or ask http://community.pmail.com/members/Rolf+Lindby.aspx for a link to the new beta version. Or you could use stunnel once again...

Thanks!