[Ach] POP3S on Outlook 2007 not supported

[Wolfgang Breyha]

On 17/02/14 19:18, Dan Benton wrote:
> All that we changed this month is to move Dovecot from the default list of
> ciphers (which is the VERY open "ALL:!LOW:!SSLv2:!EXP:!aNULL") to the list
> you publish on bettercrypto.org.
> 
> It is when we did this that support for Outlook 2007 broke.

Can you capture a outlook handshake with wireshark? With the list of
ciphers in the "Client Hello" you can check if any of them matches with the
list of bettercrypto. Most likely none of them does. I would add the best
cipher of outlook to the list of the server to improve compatibility.

Greetings, Wolfgang
-- 
Wolfgang Breyha <wolfgang.breyha at univie.ac.at> | http://www.blafasel.at/
Vienna University Computer Center              | Austria

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 538 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20140217/ec576aa8/attachment.sig>