[OSX-Users] Re: Warning: El Capitan Beta 3 release note for Apple Mail.app

[Tim Chown]

> On 10 Jul 2015, at 10:08, Jules Field <Jules at ecs.soton.ac.uk> wrote:
> 
> On 10/07/2015 09:38, Tim Chown wrote:
>>> On 9 Jul 2015, at 16:39, Jules Field < <mailto:Jules at ecs.soton.ac.uk>Jules at ecs.soton.ac.uk <mailto:Jules at ecs.soton.ac.uk>> wrote:
>>>> 
>>> smtp.ecs would offer an export-grade cipher, which OS X would refuse to use and then not opt to use something better. i *think* that's what was happening, none of the logs are detailed enough to show it well.
>>> 
>>> Now it only offers ciphers which OS X (and everyone else) are happy with.
>> 
>> BTW, I wonder if in hindsight this ties in with Apple fixing the Logjam issue with its 30th June patch?
>> 
>> https://blog.avira.com/logjam-vulnerability-threatens-thousands-of-https-websites-mail-servers/ <https://blog.avira.com/logjam-vulnerability-threatens-thousands-of-https-websites-mail-servers/>Yes, that sounds exactly right.
>> 
>> If so, I guess Andy doesn’t need to submit anything.
> It is still doing some strange port-swapping negotiation, which seems odd. Unless it was because Mail.app was trying port 25 (what you had told it to use), failed to negotiate a non-export-grade cipher there, and automatically tried 587 as a 2nd attempt, in case your port number setting was wrong.
> 
> So it *might* be by design, but still worth raising just so as to check the issue

OK :)

Tim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/osx-users/attachments/20150710/fd6bff80/attachment-0001.html