[OSX-Users] Re: Warning: El Capitan Beta 3 release note for Apple Mail.app

[Jules Field]

On 10/07/2015 09:38, Tim Chown wrote:
>> On 9 Jul 2015, at 16:39, Jules Field <Jules at ecs.soton.ac.uk 
>> <mailto:Jules at ecs.soton.ac.uk>> wrote:
>>>
>> smtp.ecs would offer an export-grade cipher, which OS X would refuse 
>> to use and then not opt to use something better. i *think* that's 
>> what was happening, none of the logs are detailed enough to show it well.
>>
>> Now it only offers ciphers which OS X (and everyone else) are happy with.
>
> BTW, I wonder if in hindsight this ties in with Apple fixing the 
> Logjam issue with its 30th June patch?
>
> https://blog.avira.com/logjam-vulnerability-threatens-thousands-of-https-websites-mail-servers/
Yes, that sounds exactly right.
>
> If so, I guess Andy doesn’t need to submit anything.
It is still doing some strange port-swapping negotiation, which seems 
odd. Unless it was because Mail.app was trying port 25 (what you had 
told it to use), failed to negotiate a non-export-grade cipher there, 
and automatically tried 587 as a 2nd attempt, in case your port number 
setting was wrong.

So it *might* be by design, but still worth raising just so as to check 
the issue.

Jules

-- 
Jules Field MEng MBCS CITP CEng
email+iMessage: Jules at ecs.soton.ac.uk
Twitter: @JulesFM

Senior Tutor, Postmaster
Electronics and Computer Science
University of Southampton SO17 1BJ, UK

'Think globally, act locally.' - Friends of the Earth

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/osx-users/attachments/20150710/cacd22a8/attachment.html