Outlook Express and STARTTLS

[Oscar del Rio]

On 21/11/2014 5:50 PM, Reindl Harald wrote:
> Am 21.11.2014 um 23:35 schrieb Oscar del Rio:
>> On 11/21/14 04:29 PM, Reindl Harald wrote:
>>>
>>> the situation for Outlook (not OE) and TLS is not much better
>>>
>>> some versions support STARTTLS on SMTP but not for IMAP/POP3 ...
>>>
>>
>> Outlook (at least since version 2010) does support STARTTLS for
>> IMAP/POP3 on port 143.
>> But they don't call it STARTTLS but "TLS". And they call "SSL" to TLS on
>> port 993/995
>>
>> With Outlook configured for "TLS" on port 143:
>> outlook -> dovecot: a0gk CAPABILITY
>> dovecot -> outlook: * CAPABILITY IMAP4rev1...STARTTLS...
>> outlook -> dovecot: h96q STARTTLS
>> dovecot -> outlook: h96q OK Begin TLS negotiation now
>> (TLS starts)
>
> for IMAP yes
> for POP *no*
>
> try it out - i have testing VM's for Outlook 2003/2007/2010 and on all 
> of them IMAP/POp3 accounts

You are right.  I hadn't tested POP3.
I just tested Outlook 2013; no STARTTLS for POP.
(I assumed that if they implemented STARTTLS for IMAP they would have 
also done it for POP... wrong assumption!).

> hence it is a crap but that fact don't solve the problem that you need 
> to support all ports and encryptions on the server side

True.