Apple Mail 8.2 disables SSL to POP3 server (Securityrisk)

Hi,
Setup
Computer:
OSX 10.10.2
Mail 8.2 (2070.6)
Mail server A
POP3 port 995 SSL
(Non SSL - port 110 -  is disabled due to security reasons)
Mail server B
POP3 port 110
POP3 port 995 SSL
Summary
OSX Mail client removes SSL support on non regular intervals for POP3 connections. For the connections that support regular non SSL POP3 (port 110) this reduces the security, but the mail is available. This was noticed by me because one ISP has locked down their POP3 server to SSL only due to security reasons. After reenabling SSL on the connection (Mail -> Preferences -> Accounts -> Account in question -> Advanced) the connection remains with SSL support for a while, then it is removed again. As OS X Mail has no token to identify SSL or regular port 110 connection this is transparant to the user, unless the server does not support regular POP3, at which time a error is generated.
Comments
1) This seems to be a security related issue with mail where OS X mail downgrades from SSL connection to regular port 110 POP3 traffic
2) If corrected the connection is downgraded again within a couple of days, if not sooner.
3) Connections to POP3 servers supporting port 110 are "unaffected" with the exception of the security issue of a downgrade
4) Connections to POP3 servers that only support SSL - port 995 - are not able to complete until SSL has been reenabled manualy.
5) Downgrade bug has been seen only on my machine, so it might not be something mainstream. Machine is updated to latest patches.
Questions
1) As this has only been observed on my machine, has anybody else seen this POP3 SSL downgrade bug?

Same problem. The following information is from Symantec:
To disable SSL\TLS
Open Apple Mail.
Click the Mail menu and select Preferences.
Select your mail account on the left under Accounts, then click the Advanced tab.
Confirm the check box labeled "use SSL" is not checked next to ports. If necessary remove the checkmark.
Click the Account Information tab and select Edit Server list from the drop down next to Outgoing Mail Server.
Click the Advanced tab and confirm there is not a checkmark next to Use Secure Socket Layer(SSL).
Click OK and close the accounts. Window and choose to save.
Click Save to update your settings.
Restart Apple Mail.
This does work for a while but eventually Mail reverts to enabling Use SSL and disabling Allow Insecure Authentication but only one some of my addresses but not all. Some accounts POP logs-in but not SMTP.

Similar Messages

  • Disabling SSL open domain server. How?

    Hi all,
    Can anybody elicidate to me how I can disable the SLL on a Open Domain OSX server?
    In
    http://support.apple.com/kb/HT5300
    it is explained that you have to disable SSL prior to updating OSX from Mountain Lion with OSX server 2.2 to OSX MAvericks with server 3.
    Any help is highly appreciated. Thanks already

    Hi UptimeJeff,
    Thanks for the reply.
    I have rolled back three times from Mavericks to Mountain Lion server and will now stay there for some month until the quirks are ironed out. Mavericks OSX server is just to cumbersome right now.
    So no email log to check at the moment.
    But the email archives were not too big and the server had a full good night to do that.
    The problem was strictly that server 3 app does not open after download and install and therefore does not let me finish configuration of the server.
    Thanks anyway.

  • Apple Mail didn't automatically get eMails when server changed

    Our company (primarily PC and using Outlet for eMail) changed from the internal server of    webmail.abc.com   to    webmail.xyz.com   (not the actual ones of course) -- and my 1400 INBOX eMails and 735 SEND eMails were gone-- only the most recent ones were there.
    OK so I had a copy on the Mac's HD - I imported them as Apple MAIL folders-- it took a while but NOW I SEE THAT the SEND mailbox has all the imported eMails dated with today's date, December 2, 2013.  (The sidebar shows the correct date and if I forward them the date is correct, but not when I open them).
    IS THERE A BETTER WAY to import (reimport?) these SEND messages? 
    ANOTHER PROBLEM just discovered:  When I go to the OUTLOOK (by using "VIEW" on the Mac to open Windows 7 Professional on my Mac) - most of the INBOX messages and all of the SEND messages that I imported are now DUPLICATED THERE!!  What a mess.
    How to do this "correctly"
    Any messages from today are not duplicated of course, and they have the correct date on them, so this is not a critical-critical problem, but sure is ridiculus to have duplicate messages from 1 Sept 2013 until 25 Nov 2013…  And if they should change things again, I'd like to know how to import things cleanly, not like this mess…
    Thanks for any comments!
    Still not easy being a MacUser in a Windows world…
    Steve
    Monday 2 December 2013

    NOTE:  A typo:   That should be OUTLOOK for eMail (not Outlet…  I must be thinking about cyber-Monday…
    Steve

  • IOS 8.12 Apple Mail for Exchange Account Deletes Message from Server

    Both my computers are set to leave Exchange emails on the server, but I can't find how to set this on my iPhone. So, if I happen to first open a message on my phone, it's no longer available when I open Apple Mail on either of my computers. I need the messages on my iMac and MacBook Pro--not just on my iPhone. How can I change the settings on my iPhone so that Exchange doesn’t delete messages once they're downloaded to the phone? Thanks in advance for any guidance you can offer. --Bill

    Thanks, Glenn. I get as far as the Advanced Settings screen, and there are 3 items for choices:
    • Use SLL - on
    • Move Discarded Messages into:
      Deleted Mailbox - check
      Archive Mailbox - not checked
    • S/MIME
      S/MIME - off
    I don't see how I can choose to NOT delete messages. (I'm assuming that the Move Discarded Messages into: Deleted Mailbox is a setting to tell iOS 8 what to do with a message that I choose to delete from my iPhone.)
    Any further guidance?
    thanks,
    Bill

  • Apple Mail won't connect to GoDaddy pop server

    Hi all,
    I have entered all the correct server information to connect to GoDaddy's pop server but Mail won't connect. I can connect to the smtp server without a problem. The same settings work perfectly in Entourage, so my information is correct. Has anyone else experienced this issue and fixed it?
    Here are the settings:
    POP: pop.secureserver.net
    AUTHENTICATION: password
    Thanks,
    John

    Mine stopped wotking on the 9th, under the mail app on the left hand side, if you have triangles with ! marks in them, perform a left click and start "Mail Connection Doctor" This may help pinpoing the issue.
    Mine is failing at trying to connect on port 143.
    This worked for me, go the accounts settings window and in each gmail account enter the following info
    Advanced Tab
    IMAP Path Prefix enter [Gmail]
    If you then tick "Use SSL" this should make the port 993
    Authentication shold be set to "password"
    Then save these settings, finally email is received, hope this helps.
    Let is know how you get on.

  • Solution to yahoo mail setup issues with Apple mail...

    There have to be a lot of people out there who have a similar setup as me --- ISP is Verizon (FIOS), and am using an iMac w/OS X, v 10.7.4, and Apple Mail v 5.2.  No matter what I did, I could not get Apple mail to connect to Yahoo's smtp server...  (Gmail was not working either)  I spent hours on this.  FINALLY -- I discovered the problem.  My FIOS router/firewall was on the maximum security setting, which only allows outgoing smtp mail to port 25!  Once I changed that firewall setting (which allows outgoing smtp mail to port numbers other than 25), I was finally able to connect to yahoo's smtp server!  Now my Apple mail works just fine.  Here are the settings I used:
    Incoming mail server: pop.mail.yahoo.com
    Incoming port: 995
    Outgoing mail server: smtp.mail.yahoo.com
    Outgoing port: Used "custom port" set to 465
    SSL is used for both incoming and outgoing servers, with password as the authentication method.
    Full email address is used wherever it says "user name" in mail preferences
    * This is with Yahoo Plus mail.  And before you do anything with Apple mail, you have to make sure that you enable "POP" mail in your Yahoo Plus account, under mail - settings.
    I hope this saves some people the hours of time that it cost me!! 

    I have managed to get incoming mail to work. It is the outgoing settings that are still not working on my system. I have tried every configuration. I have gone back and forth between Verizon and Apple Care too many times to count.
    Do you have to turn down the security level on the FIOS router/firewall before making these changes? If you do, it probably makes the system more vulnerable to malware, etc.
    I have standard Yahoo Verizon mail. I believe you can enable it for POP mail. It certainly always worked for me before. Like you I have tried everything. I was also told that my internet connection is PPPoE versus DHCP which may also cause problems. Like you, I have spent days trying to sort this out.

  • Set up exchange account in apple mail 2.0.5

    hi-
    we have a user who is the only mac in a windows network environment. he is currently using pop3 to access email from our exchange 2003 server, but now he would like to start using Exchange for access. all of his settings look right, although when apple Mail tries to connect to the exchange server, an error comes up:
    "Connection Failed. There may be a problem with the mail server or network. Check the settings for account "Exchange Account" or try again. The server error encountered was: The server "server.domain.com" refused to allow a connection on port 143"
    also, in the mail connection doctor an error says:
    "Could not connect to this Exchange server. Check your network connection and that you entered the correct information in the Account preferences."
    can anyone help? should i be changing any settings on the server, or using Entourage or IMAP? what do you guys think?
    thanks a bunch - i appreciate it!!
    krelu
    Mac OS X (10.4.5)
    Mac OS X (10.4.5)
      Mac OS X (10.4.5)  

    Got it...have to hold 'Option' button down after putting in name and password and it changes to 'Continue'.

  • Apple Mail changes settings after connecting to a GoDaddy server.

    I have set up an account in Apple Mail to connect with an email account on a GoDaddy dedicated server. When I set up the account as an IMAP account everything works perfectly for the first connection to the server.
    Immediately after the first connection to the server, I can no longer connect to the server via that Apple Mail account. Furthermore the settings in the account have changed. The incoming port is now 143 instead of 993 and the authentication is MD% instead of password.
    GoDaddy insists this is a problem with Apple Mail, though I don't have this problem with any of the other email accounts I have set up in Apple Mail that connect with other servers.
    My suspicion is that there is something about the way GoDaddy's server is handling SSL that causes Apple Mail to think that SSL is not working and reset the incoming port to 143, which is what it should be if SSL were not being used.
    Note, that the only way I can connect with the GoDaddy server is to delete the account and create a new one with the correct settings. Changing the settings in the altered account does not work.
    Thanks,

    Try going to Mail/Preferences/Accounts/Advanced and deselecting Automatically detect and maintain account settings. You will need to do this for each account.

  • How to disable SSL v3 for sun os 5.6 (OAS 4.0.8), I am facing POODLE vulnerability issue?

    my Website is hosted on Sun OS 5.06 (OAS 4.0.8) and using web server : Oracle_Web_Listener/4.0.8. Website is configured to use https for secure pages and it was working fine from last 10 years but suddenly i am getting complaints from my customers that they can not browse site on chrome version 40 and above and firefox 34 and above.
    I searched for this issue and found that there is POODLE attack which may causing this issue. now the only solution i can see is to disable SSL v3 on server.
    Can any help me out with the process or an idea, How to disable SSL V3 on this Olde server? its sun microsystem server.

    Hi Aamir,
       This is old software, been a while since I saw one of these.
        Normally when SSL was setup there were two listeners, one with SSL and one without, in a different port, so you could try to find this second port, which may work without any need to change the configuration.
        Else, try to check on the OAS manager (Usually on port 8888), the HTTP listener -> WWW -> Network, if there is a setup only for the SSL port, you will need to add a new line, with the same configuration, but a different port and the security disabled.
        Also, there may be some setting on the application itself for the url path. If so, when you navigate in the application it will try to redirect you back to the SSL port. In that case you will need to figure out where to change that, which depend on the application itself.
       Found this page on google with the process to setup SSL on OAS 4.0, you need to do the inverse of step 5.
    WoSign Support: SSL Certificates Installation Instruction - Oracle Web Server (OAS 4.0.8)
    Regards,
    Luis

  • Why are my sent items not stored when sending from Apple Mail?

    Hello Apple Support Communities,
    I am Using an iMac at my place of employment. It is running OSX Yosemite v10.10.2 . I am also using Apple Mail to connect to our Exchange 2010 Server. I do the same with my iPhone, iPad, and Windows Laptop using Outlook 2013. For a while now, several months in fact, It turns out that any emails sent from my iMac using Apple mail will not store a copy of it in my sent items on the server. They are not stored in the iMac account, the iPhone, the iPad, or Outlook on my Windows Laptop. However, any email sent from the other devices will have a copy stored in the sent items folder and it will propagate to all of my devices.
    Upon investigating, I found myself looking through the tracking logs of my Exchange Server and found that Apple Mail and the iPhone send messages completely differently. I think this might be the source of my problem, but I have no clue whether I can fix it, or even where to start. Here is an image depicting the logs. Any input would be appreciated. Thank you for your time!

    Sometimes this issue is caused by a misconfiguration or incompatibility of the Exchange server, or perhaps by a bug in Mail. If so, you won't be able to resolve it yourself. The fact that your iOS devices may be working well with the same account isn't relevant, because iOS uses a completely different protocol (ActiveSync) to communicate with Exchange servers. By default, OS X Mail uses the EWS protocol.
    Each of the following steps has been reported to help with Exchange issues, at least temporarily, in some cases:
    1. Back up all data. Open the Internet Accounts pane in System Preferences and check to make sure you don't have duplicate Exchange accounts. If you do, delete all but one of the duplicates. If there are no duplicates, delete the account and recreate it with the same settings. The messages will still be on the server.
    2. Rebuild the affected mailbox.
    3. Reindex messages.
    4. In the Keychain Access application, delete the password item for the account. The next time Mail tries to access the account, you'll be prompted for the password. Check the box to save it in the Keychain.
    5. If you've created subfolders of any Exchange mailbox, log in to the server through its web interface, move the messages out, and remove the subfolders. For best results, a mailbox should have no subfolders.
    6. Synchronize with the server using IMAP rather than EWS. This is only possible if IMAP is enabled on the server.
    7. Consider using Outlook instead of Mail to access your Exchange mail.
    See also this discussion.

  • Apple Mail in 10.6.8 not displaying attachments

    I am unable to get consistent results on displaying attachments from Apple Mail on 10.6.8 with Exchange Server 2007 SP3 RU4. Attachments sent from an Outlook 2007 client on the same exchange server are not displayed in Apple Mail. The message shows no sign of an attachment. The problem with this issue, is it is not consistant. If I forward the e-mail message from my iPhone to myself, I get the attachment in Mail. It shows up in my iPhone correctly. I am connected to Exchange in Mail via the standard EWS (Exchange Web Services). The original message doesn't show any attachment in Mail. But after 20 or so minutes, the attachement show in the message body, but not in the header up top. Just driving me crazy. Is there anyone that can point me in a direction on who to contact on this issue to find out how it can be fixed?
    Thanks,
    Nate

    I'm having the same problem and it is driving me crazy. My main email account at work is on an Exchange 2007 server. When I send emails with attachments (using Mail 4.5), I get people replying telling me that I haven't included the attachments. However, I know I have as the attachments appear in the Sent Items and I have also tested it by sending blind copies to a Gmail account and they turn up there even when the recipient is telling me that they cannot see the attachment. Even worse, people send me emails with attachments and the attachments either just do not appear at all or they appear intermittently. Whatever the problem, this really isn't good enough - how can I work with such unreliability. If anyone has any suggestions or ideas for how to fix or work around this I'd be very grateful!

  • Can Apple Mail filter spam per account?

    Sorry if this is to the wrong forum - I didn't see one for Apple Mail.
    I have two mail accounts setup in Apple Mail: one for work (an MS Exchange server) and one for home (a gmail account via IMAP).  When I originally setup Mail, junk filtering was on, but I vaguely recall the junk filtering interfering with the filtering Google's own junk mechanism (which, by the way, is amazingly effective!), so I turned off Mail's junk filtering.  But lately, I've been getting more junk mail on my work account and would like to do junk filtering there.  But it appears that "Junk" filtering can only be turned on globally - not on an account basis.  Or is there a way?
    Thanks for all info/suggestion.

    There's really no way for the Mail's Junk filter to interfere with Google's. Google's filter acts before Mail even sees the message. I would just turn it on. If Google's filter is good, Mail will rarely see any spam that Google didn't already deal with.
    But if you really want to exclude an account, choose Perform custom actions in the Junk Mail pane of Mail preferences. Then in the Advanced dialog, set criteria to restrict the filter according to Account.

  • Apple Mail Settings

    Yesterday, my ISP (cox) took POP mail down for maintenance. I was out of business for sending/receiving mail via Apple Mail. The ISP maintenance is finished, however, I'm still unable to get/send mail using Apple Mail client. I haven't changed anything but when Apple Mail tries to connect to the ISP server, I get a spinning ball and an automatic disconnect. I'm only able to get to mail using the ISP web mail. After checking with the ISP they say the port setting (25) appearing in my Mail setup is blocked and to to contact my computer manufacturer for the correct port. Anyone have any info on the correct port setting I should be using with a Toshiba cable modem? Thanks.

    Hello Bruce.
    > After checking with the ISP they say the port setting (25) appearing in my Mail setup is blocked and to to contact my computer manufacturer for the correct port.
    This tech person with Cox that told you this is misinformed or doesn't have a clue.
    A computer manufacturer doesn't block Port 25. Your ISP is responsible for blocking Port 25 which is done by most ISPs for SMTP servers that are outside of their network or not provided by the ISP and is related to sending messages only, not receiving.
    If this email account and SMTP server is provided by Cox, most ISPs do not block Port 25 for their SMTP server.
    If your Mac is connected direct to the cable modem (no router in between), try resetting the modem.
    Shut down your Mac and then unplug the modem from the electrical outlet. Wait 5 minutes and then plug the modem back in allowing it to completely reset and then start up your Mac.

  • TS3276 Apple MAIL - Version 4.6 (1085)

    Several days ago my Apple MAIL -Version 4.6 (1085) for no apparent reason suddenly refused to SEND email messages.
    When I hit the paper airplane send icon I get a message "Cannot send mail using the server mail:[email protected]
    The Apple MAIL “Preferences” state that the outgoing mail server is “mail:[email protected] (Offline)”
    But I can find no indication that <[email protected]> is offline. Messages sent to that address show up on Apple MAIL.
    Any suggestions?

    Try these server settings.
    Mail Server Information

  • Apple Mail - Amber color sometimes in Mailbox Pane in Yosemite

    Hi
    I am running OX X Yosemite 10.10 and using Apple Mail. Sometimes in the Mailbox pane on the left I see the top of the column glow amber and fade down the upper part of the column. It almost appears as if the color is moving. Has anyone else seen this and if so do you know what it signifies? My guess it means it is checking mail, but it does not to it consistently to affirm my guess.
    Any help is appreciated!
    Brandon

    solved it without delete/add back (which would have been a pain)
    turns out the having INBOX in the mail app path prefix setting (mail/ preferences/accounts/advance) was causing the entire account to not show up in the mailbox pane.
    I have other email acts where it works only with INBOX in this setting. Still haven't figure out what makes this necessary sometimes, and not other times. Once the account showed up in the bottom of the mail pane, I was able to expand it and highlight the individual mailboxes that appeared (sent, drafts, etc), and then select the "Use this mailbox as" command which is at the bottom of the Mailbox menu.
    Seems to me that different IMAP servers present themselves to mail clients with a fair amount of variation, so setting up Apple's mail app for one IMAP acct may be quite different from another.
    I wish I could find a really good tutorial which thoroughly explains mailboxes in the apple mail client and mailboxes in an IMAP server and how they all interact, but anyway, its working ok now.

Maybe you are looking for

  • PC-Mac issues with PDF multimedia created in Acrobat X

    I created a slideshow in Lightroom and exported it to pdf. I brought it into Acrobat and added a few slides in the beginning, plus sound that starts at the first Lightroom slide (and the Lightroom slides autoplay, presumably this was a setting in Lig

  • Can I post a down payment with a Special G/L indicator?

    I have to post a down patment. I want to post a Down payment with posting keys 29 Special G/L debit and 39 Special G/L credit. The system does not allow to post 29 Vendor subledger account to 50 G/L Bank account.  Is it possible to configure that pos

  • SSLListenThread: Problem acception connections

    Hi - we are testing weblogic510sp1 on Solaris 7. - Our load balancer, F5 BIGip, performs a simple service check every 10 seconds, attempting to establish a connection to the specified services running on this server, 80 and 443. F5 calls this "tping"

  • Firefox is not displaying the correct font color on my blog, but other browsers are.

    I have a web designer issue. Firefox is not displaying the correct font color on the header in my blog. Explorer, Chrome, and Safari have no problems. The page is in css but this particular section has html code o designate color. The code is as foll

  • How do I get contacts in iCloud to sync back to my MacBook Pro?

    When I add a new contact to my iPhone it goes to my Contacts in iCloud. How do I get iCloud to send the contact to my MacBook Pro? On the Macbook Pro in Preferences> iCloud> Contacts is not checked. When I check it I get "Do you want to merge contact