dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
586
share rss forum feed

mlord

join:2006-11-05
Nepean, ON
kudos:13

Start.ca: Authenticated SMTP for outgoing email?

Does Start.ca support SSL/TLS or some other form of authentication?
If so, can this then be used when connected through a different ISP (eg. when travelling) ?

Thanks


mlord

join:2006-11-05
Nepean, ON
kudos:13

Oh, and on the same vein, how does one access Start.ca SMTP for outgoing email in a Red cable service area? What port number?

Thanks



rocca
Start.ca
Premium
join:2008-11-16
London, ON
kudos:23

mail.start.ca, port 25. For roaming you can use 465, and it uses pop3 before smtp authorization.


mlord

join:2006-11-05
Nepean, ON
kudos:13
Reviews:
·Start Communicat..
·TekSavvy Cable

Click for full size
Anybody can see my email password
Click for full size
Leftover expired SSL cert
said by rocca:

For roaming you can use 465, and it uses pop3 before smtp authorization.

Oh, so it triggers a temporary permission for smtp based on seeing pop3 just beforehand (within a few minutes, I suppose) ? Cute.

I'm not happy with unencrypted passwords, though. That's simply not usable.
There appears to be an expired security certificate on the mail server, but nothing uses it.

mlord

join:2006-11-05
Nepean, ON
kudos:13
Reviews:
·Start Communicat..
·TekSavvy Cable

said by mlord:

I'm not happy with unencrypted passwords, though. That's simply not usable.

Lack of SSL means anyone can read any Start.ca users' email on the same cable segment. Okay, that's not great, but commonplace.

Worse though, MUCH worse, is lack of protection for the email account credentials (password). This means anyone can similarly then log in to Start.ca email as somebody else, and read/delete their emails, and send emails "from" that user. All without the user even knowing. That's bad, really bad.

Or am I missing something here?


rocca
Start.ca
Premium
join:2008-11-16
London, ON
kudos:23

said by mlord:

Worse though, MUCH worse, is lack of protection for the email account credentials (password).

You can use encrypted port 995 for POP3.

mlord

join:2006-11-05
Nepean, ON
kudos:13

Isn't that the port with the expired certificate?
I thought I tried that already (failed). Will try again, maybe finger trouble.


mlord

join:2006-11-05
Nepean, ON
kudos:13
Reviews:
·Start Communicat..
·TekSavvy Cable


Encryption, yay!
Yup, must have been user-error. It's working now,
with the expired security certificate from Start.ca.

Cheers


hrmm

@videotron.ca
reply to mlord

Starts forum: »Start Communications

But you already know this since you already post there. And you already have an Email topic going here...


mlord

join:2006-11-05
Nepean, ON
kudos:13
Reviews:
·Start Communicat..
·TekSavvy Cable

1 edit

said by hrmm :

Starts forum: »Start Communications

I cannot find any way to navigate to that "forum" without searching through topics and posts (like yours) to find a direct link.

Starting at the www.dslreports.com main page, what is the sequence of clicks to get to that obscure hidden sub-forum?

The only reason I post questions here, is so others can find them and see the answers to them, thereby increasing the public knowledgebase, and the value of this site (dslreports). Otherwise I'd just squirrel everything away in private emails to support@start.ca, which would selfishly benefit only me, not others.

Cheers