User Tools

Site Tools


faq:email:secure_imap_pop3_smtp_faq

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
faq:email:secure_imap_pop3_smtp_faq [2019/12/19 15:18] ziyufaq:email:secure_imap_pop3_smtp_faq [2022/02/14 16:29] (current) vikki
Line 1: Line 1:
 +[[:start|Home]] > [[:faq|FAQ]] > [[faq:email|Email]] > [[faq:email#general|General]] > **Secure IMAP/POP3 and SMTP FAQ**
 +
 ====== Secure IMAP/POP3 and SMTP FAQ ====== ====== Secure IMAP/POP3 and SMTP FAQ ======
  
Line 11: Line 13:
  
 === Q: Why does my mail client warn me "the secure certificate is invalid" or "cannot verify server identity"? === === Q: Why does my mail client warn me "the secure certificate is invalid" or "cannot verify server identity"? ===
-A: That's because each secure certificate has to verify against the server name that you connect to. If you connect to mail.your-domain.com, your mail application will warn you as the certificate belongs to someone else like *.agnx.com. You can safely accept the certificate coming from agnx.com as it is AfterOffice Global Network Exchange domain.+A: That's because each secure certificate has to verify against the server name that you connect to. If you connect to mail.your-domain.com, your mail application will warn you as the certificate belongs to someone else like *.agnx.com. You can safely accept the certificate coming from agnx.com as it is our global network exchange domain. Read more at [[faq:email:certificate_warning_on_mail_client|Why does my email client keep showing certificate warning?]]
  
  
 === Q: Which secure connection should I use? SSL or STARTTLS? === === Q: Which secure connection should I use? SSL or STARTTLS? ===
-A: In most cases, your mail client will decide which method is best to be used. If you configure your mail client manually to connect to port 995 (POP3), 993 (IMAP), SSL will be used instead of STARTTLS. If your configuration still uses the "standard port" like 110, 143 or 587, it means STARTTLS is the best to enable secure connection on these ports. There is no "which is better" in comparison, it is all up to your mail application preference, and your network firewall (some ISP blocked the access to STMP port 25, some corporate network block all "insecure ports").+A: In most cases, your mail client will decide which method is best to be used. If you configure your mail client manually to connect to port 995 (POP3), 993 (IMAP), SSL will be used instead of STARTTLS. If your configuration still uses the "standard port" like 110, 143 or 587, it means STARTTLS is the best to enable secure connection on these ports. There is no "which is better" in comparison, it is all up to your mail application'preference, and your network firewall (some ISP blocked the access to STMP port 25, some corporate network block all "insecure ports").
  
  
 === Q: What is the difference between SSL and STARTTLS? === === Q: What is the difference between SSL and STARTTLS? ===
-A: SSL is easier to configure as it is usually associated with a dedicated port number - although you need to get the port number right as SSL is assumed to be running at the port. You cannot connect to port 110 with SSL for example, as the port has been reserved for plain POP3 connection (the secure POP3 port is at 995). Where STARTTLS is more advanced since it is usually supported at the original ports (110 for POP3, 143 for IMAP, 25 and 587 for STMP etc). Connection to these "standard ports" will have to go with STARTTLS as it is more of a hybrid connection that starts as plain, switching to SSL after the connection is established. AfterOffice offers both SSL and STARTTLS at related ports.+A: SSL is easier to configure as it is usually associated with a dedicated port number - although you need to get the port number right as SSL is assumed to be running at the port. You cannot connect to port 110 with SSL for example, as the port has been reserved for plain POP3 connection (the secure POP3 port is at 995). Where STARTTLS is more advanced since it is usually supported at the original ports (110 for POP3, 143 for IMAP, 25 and 587 for STMP etc). Connection to these "standard ports" will have to go with STARTTLS as it is more of a hybrid connection that starts as plain, switching to SSL after the connection is established. Lookafter offers both SSL and STARTTLS at related ports.
  
  
Line 31: Line 33:
  
 === Q: I have "SSL - accept all certs" options, should I use it? === === Q: I have "SSL - accept all certs" options, should I use it? ===
-A: Yes, it means the mail client will accept any certificate even if the host name is unmatched - which is generally fine. If you would like to establish your own SSL certificate with your own domain, kindly write to us at [[support@afteroffice.com]] and we will assist you on that matter.+A: Yes, it means the mail client will accept any certificate even if the host name is unmatched - which is generally fine. If you would like to establish your own SSL certificate with your own domain, kindly write to us at [[helpdesk@lookafter.com]] and we will assist you on that matter.
  
  
Line 43: Line 45:
  
 === Q: I am still on an old system and its mail application has limited support for SSL, should I be worried? === === Q: I am still on an old system and its mail application has limited support for SSL, should I be worried? ===
-A: Make sure that you don't use "plain" password authentication method (CRAM-MD5 is a good alternative), stay away from public network (open WIFI) and then you should be fine.+A: Make sure that you don't use "plain" password authentication method (CRAM-MD5 is a good alternative), stay away from public network (open WIFI) and you should be fine.
faq/email/secure_imap_pop3_smtp_faq.1576739916.txt.gz · Last modified: 2019/12/19 15:18 by ziyu