On Nov 17, 2006, at 6:37 PM, Steven F Siirila wrote:
On Fri, Nov 17, 2006 at 06:32:18PM -0500, Jason Dixon wrote:
I stand corrected, Mail.app is using SSL (or at least, that's the only option in the account settings). After changing Thunderbird to use SSL, it makes a successful connection. I'm curious though; I have verbose_ssl enabled, and all I see is that a TLS login was completed. Why does it say TLS, if it's really using SSL? Why do we not see any additional information about the session?
Terminology. SSL has several versions: SSLv2, SSLv3, TLSv1. All are considered to be Secure Sockets Layer, with the last one being the most current version. I think what some folks think of when they hear "TLS" is the more modern way of negotiating an SSL/TLS connection via POP's STLS or IMAP's STARTTLS or SMTP's STARTTLS commands. Whether you use an "SSL" port (e.g. 465, 993, 995) or a non-SSL port (e.g. 25, 587, 143, 110) and negotiate "SSL", you are likely using
TLSv1.
Thanks for the explanation. Sounds like Thunderbird's "TLS" setting
probably means to try STARTTLS, rather than use TLSv1.
-- Jason Dixon DixonGroup Consulting http://www.dixongroup.net