Community Discussions and Support
Perfect Forward Secrecy with Pegasus v4.63

[quote user="Chris03"]Will PFS be supported soon?[/quote]

Since OpenSSL supports it and Pegasus Mail will switch from using CryptLib to OpenSSL it should be possible to implement it. But I can't tell whether it may happen soon or not - depending on what "soon" is supposed to mean anyway ...

<p>[quote user="Chris03"]Will PFS be supported soon?[/quote]</p><p>Since OpenSSL supports it and Pegasus Mail will switch from using CryptLib to OpenSSL it should be possible to implement it. But I can't tell whether it may happen soon or not - depending on what "soon" is supposed to mean anyway ...</p>
			Michael
--
IERenderer's Homepage
PGP Key ID (RSA 2048): 0xC45D831B
S/MIME Fingerprint: 94C6B471 0C623088 A5B27701 742B8666 3B7E657C

Hi,

I use Fastmail.fm for email service, last Friday they enabled PFS [perfect forward secrecy] for secure connections.

I can not make a connection to Fastmail with Pegasus v4.63 now, except by using an insecure setting.  

Will PFS be supported soon?


Chris

<p>Hi,</p><p>I use Fastmail.fm for email service, last Friday they enabled PFS [perfect forward secrecy] for secure connections.</p><p>I can not make a connection to Fastmail with Pegasus v4.63 now, except by using an insecure setting.  </p><p>Will PFS be supported soon?</p><p> </p><p>Chris</p>

May I ask what setting you are using now?

Reason: I have run into the same problem and would like to enable IMAP connections again. Scratching my head right now since the exact setting work with Mulberry.

---------- Fastmail tech blog -------------

Today we’ve updated our ciphers to the best practice recommended by SSL Labs. Using the SSL Labs site tester on www.fastmail.fm shows that we now support PFS on all major browsers except for IE 8 on Windows XP, which has no support for PFS and so can never support it.

----------------------------------

Strange running WinXp SP3 IE8 (installed, Opera as default). Mulberry via thumbdrive on same machine.

figured it out:

insecure.messaginengine.com instead of mail.messaginengine.com 


Wonder why one works and the other fails if related (seems to be) to the PFS change by Fastmail.  Never use the web interface only desktop client. Like Pegasus more than Fastmail... good thing GMX works without problem, may change subscriptions sending to FM to GMX.

<p>May I ask what setting you are using now? </p><p>Reason: I have run into the same problem and would like to enable IMAP connections again. Scratching my head right now since the exact setting work with Mulberry.</p><p>---------- Fastmail tech blog -------------</p><p>Today we’ve updated our ciphers to the best practice recommended by SSL Labs. Using the SSL Labs site tester on www.fastmail.fm shows that we now support PFS on all major browsers except for IE 8 on Windows XP, which has no support for PFS and so can never support it.</p><p>----------------------------------</p><p>Strange running WinXp SP3 IE8 (installed, Opera as default). Mulberry via thumbdrive on same machine. </p><p>figured it out:</p><p>insecure.messaginengine.com instead of mail.messaginengine.com </p><p> </p><p>Wonder why one works and the other fails if related (seems to be) to the PFS change by Fastmail.  Never use the web interface only desktop client. Like Pegasus more than Fastmail... good thing GMX works without problem, may change subscriptions sending to FM to GMX.</p>
live preview
enter atleast 10 characters
WARNING: You mentioned %MENTIONS%, but they cannot see this message and will not be notified
Saving...
Saved
With selected deselect posts show selected posts
All posts under this topic will be deleted ?
Cancel
Delete
Pending draft ... Click to resume editing
Discard draft