151–157 of 157 posts
Earlier quoted context omitted.
But if you distrust the entire PKI ecosystem, how are you intending to use your email server? If someone is trying to send you an email, their admin definitely isn't going to set up an in-person meeting with you to exchange certificate signatures. Their server is either going to accept any certificate (which means MitM is trivial), or they're going to verify it against PKI (which you don't use because you don't trust…
IMAP is for reading your emails not sending, that means you could accept PKI for SMTP to communicate with untrustworthy clients, but want to ensure that your access to your emails are safe(r).
And if your threat model is bad enough that PKI isn't good enough for IMAP, why aren't you using a VPN in the first place? Or even an airgapped network? Or PGP?
Earlier quoted context omitted.
iOS never supported this configuration regardless, a change in SSL certificate does not cause any kind of notification to the user. Also, you're basically objecting to the entire idea of PKI for use in IMAP which is incredibly hard to justify. Perhaps you wish to use a different model for your own personal reasons but the default being PKI should not be controversial, and if you want to use your own model you should…
It did support it. One had to trust the certificate manually. I gave up on self-signed cents about 6 years ago.
Earlier quoted context omitted.
No. He noted that it's a REGRESSION. So he chose one that DID accept them. Running away from defects doesn't get them fixed.
Self-signed certs were a defect — people were used to just click OK and blackhats exploited that. OP wants support for the special case where only the cert issuer trusts the cert (he has his own self-signed cert). Apple and others do support that: You make a private CA, trust that CA in the device, and then use that CA to sign certs for your IMAP server. IIRC (and this is from vague memory) you may need to configure…
Earlier quoted context omitted.
It did support it. One had to trust the certificate manually. I gave up on self-signed cents about 6 years ago.
It supported using self signed certs, but if the server suddenly switched from a self signed to a trusted CA-signed certificate, no prompt would be given. So the idea that self signed certificates are somehow more secure for this specific purpose is incorrect.
Using dovecot 2.3/Ubuntu on the server.