TLS usage in Mail

I've set up a postfix server using version 2.3.3 (redhat) along with dovecot.
Enabled it to use TLS. The previous version of postfix was 2.2.x. Mail worked just fine
using TLS on version 2.2. It breaks when using the newer version with TLS. Secure pop3
or secure imap works just fine with Mail and dovecot. It's smtp using TLS that has a problem.
Turning off TLS and using port 25 works just fine.
Loaded up Thunderbird and ran the checks SSL, TLS, text (port 25, plain vanilla), same certificates
as used with mail. Works just fine.
Ran same checks using Mail, and turned debug on at the mail server (postfix), and it looks like
it hangs during the TLS negotiation. i.e. does not handle version 3 it seems. It hung on the client
side, i.e. Mail.
Checked using ports 25, 465, and 587. Tried unchecking SSL at Mail for port 587.
No affect. Mail autochecks the connection, and sometimes it would pass, and other times
it would fail. This depended entirely on the server side (postfix) cached credentials. Turning
caching off at the postfix server provides a better test of the way Mail works.
i.e. in postfix comment out the line "smtpdtls_session_cachedatabase = "in main.cf ,
also setting the "smtpdtls_session_cachetimeout = " to a low value works.
The CA used for all checks was self signed. It was used to sign the server certificate.
This worked just fine for all clients and servers involved.
Here is what the server (postfix) log is indicating when the port is 587 and SSL check box is
checked using plain username and password to authenticate.
Feb 6 17:51:38 mail postfix/smtpd[9565]: connect from crystal.pharmacy.ohio-state.edu[128.146.80.58]
Feb 6 17:51:38 mail postfix/smtpd[9565]: disconnect from crystal.pharmacy.ohio-state.edu[128.146.80.58]
Feb 6 17:51:49 mail postfix/smtpd[9565]: connect from crystal.pharmacy.ohio-state.edu[128.146.80.58]
Feb 6 17:51:49 mail postfix/smtpd[9567]: initializing the server-side TLS engine
Feb 6 17:51:49 mail postfix/smtpd[9565]: setting up TLS connection from crystal.pharmacy.ohio-state.edu[128.146.80.58]
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:before/accept initialization
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:error in SSLv2/v3 read client hello A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:error in SSLv3 read client hello B
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:error in SSLv3 read client hello B
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 read client hello B
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 write server hello A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 write certificate A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 write server done A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 flush data
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:error in SSLv3 read client certificate A
Feb 6 17:51:49 mail postfix/smtpd[9567]: connect from crystal.pharmacy.ohio-state.edu[128.146.80.58]
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:error in SSLv3 read client certificate A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 read client key exchange A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:error in SSLv3 read certificate verify A
Feb 6 17:51:49 mail postfix/smtpd[9567]: setting up TLS connection from crystal.pharmacy.ohio-state.edu[128.146.80.58]
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:before/accept initialization
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:error in SSLv2/v3 read client hello A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:error in SSLv3 read client hello B
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:error in SSLv3 read client hello B
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 read client hello B
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 write server hello A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 write certificate A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 write server done A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 flush data
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:error in SSLv3 read client certificate A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:error in SSLv3 read client certificate A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 read client key exchange A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:error in SSLv3 read certificate verify A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:error in SSLv3 read certificate verify A
Feb 6 17:51:49 mail last message repeated 2 times
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 read finished A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 write change cipher spec A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 write finished A
Feb 6 17:51:49 mail postfix/smtpd[9565]: SSL_accept:SSLv3 flush data
Feb 6 17:51:49 mail postfix/smtpd[9565]: save session FDE39063436627C13B70FC2F99018D62FD617A52D02330C71BC11BE36BC0090A to smtpd cache
Feb 6 17:51:49 mail postfix/tlsmgr[9566]: put smtpd session id=FDE39063436627C13B70FC2F99018D62FD617A52D02330C71BC11BE36BC0090A [data 126 bytes]
Feb 6 17:51:49 mail postfix/tlsmgr[9566]: write smtpd TLS cache entry FDE39063436627C13B70FC2F99018D62FD617A52D02330C71BC11BE36BC0090A: time=1233960709 [data 126 bytes]
Feb 6 17:51:49 mail postfix/smtpd[9565]: TLS connection established from crystal.pharmacy.ohio-state.edu[128.146.80.58]: TLSv1 with cipher AES128-SHA (128/128 bits)
Feb 6 17:51:49 mail postfix/smtpd[9565]: disconnect from crystal.pharmacy.ohio-state.edu[128.146.80.58]
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:error in SSLv3 read certificate verify A
Feb 6 17:51:49 mail last message repeated 2 times
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 read finished A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 write change cipher spec A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 write finished A
Feb 6 17:51:49 mail postfix/smtpd[9567]: SSL_accept:SSLv3 flush data
Feb 6 17:51:49 mail postfix/smtpd[9567]: save session C45CE103ACA91E9BE220A32CA1007F7C61601DCFE753A08EF726DAE1ED166731 to smtpd cache
Feb 6 17:51:49 mail postfix/tlsmgr[9566]: put smtpd session id=C45CE103ACA91E9BE220A32CA1007F7C61601DCFE753A08EF726DAE1ED166731 [data 126 bytes]
Feb 6 17:51:49 mail postfix/tlsmgr[9566]: write smtpd TLS cache entry C45CE103ACA91E9BE220A32CA1007F7C61601DCFE753A08EF726DAE1ED166731: time=1233960709 [data 126 bytes]
Feb 6 17:51:49 mail postfix/smtpd[9567]: TLS connection established from crystal.pharmacy.ohio-state.edu[128.146.80.58]: TLSv1 with cipher AES128-SHA (128/128 bits)
Feb 6 17:51:49 mail postfix/smtpd[9567]: disconnect from crystal.pharmacy.ohio-state.edu[128.146.80.58]
However, the Mail application indicates that the outgoing server is (offline).
It maintains this message for port 465 for all configurations as well.
Doesn't work any better on port 25 for any of the secure configurations.
Question: Does an exception for Mail have to be entered into the postfix server policy for the
security level (v 1, 2, or 3, or TLS v1) supported by the Mail application?
Question: Does Mail application support TLS as implemented by the current version of SSL and
Postfix?
Thank you for considering this problem.
Ed Beranek

I have discovered somthing odd.
My network was setup using a single Dlink DI-524 router sharing a 10M down / 1M up connection to a Nintendo Wii, Linux server, and 3 Windows XP pcs and my single Macbook. I noticed through the logs that the Wii connected multiple times through the wifi connection getting updates and every time that it did this it would temporarily knock my Macbook off the network causing a delay accessing Gmail's IMAP servers. This causes Mail.app to go into a loop trying to access the IMAP servers and chew up tons and tons of RAM.
Solution. I setup a second Belkin router off one of my Dlink's ports and configured it to only allow my Macbook and AppleTV to access it. Problem solved. I have a rock solid internet connection with zero disruption to Gmail's IMAP servers. It appears with the 10.5.2 update, mail.app has developed a sensitivity to how it connects to the network. Hopefully 10.5.3 fixes it. We will have to see.
Hope this helps.

Similar Messages

  • Disabling TLS on outbound mail hub transport

    Hi,
    which are the risks to disable TLS on outbound mail ?
    I should do that because of corporate mail filtering purposes and with TLS is is impossible to scan mail and/or attachments
    Any help appreciated.
    Best regards.

    SMTP over TLS should not affect your ability to scan mail or attachments. The TLS happens in transit between SMTP gateways. 
    Twitter!:
    Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.
    Hi, thanks for reply.
    Can you please explain ?
    However, If I try to scan smtp protocol with my appliance, it does not work: error is that traffic is encrypted.

  • Split module usage in mail adapter

    hi,
         Can anyone explain whts the usage of Splitmail module in mail adapter?
    The Scenario for the  interface is IDOC to Mail.
    IDOC is transformed by XI and mapped to a target message, and then it
    is send as a mail with file attachment to various customers via the
    MAIL Adapter
    I am getting an error in Mail Adapter(exception caught with cause com.sap.engine.services.ejb.exceptions.BaseTransactionRollbackLocalException)
    1. Iam using the follwing beans in the moduletab localejbs/SplitMail, localejbsMailContent for the conversion of idoc data records to receive in the mail server as an attachement.
    <b>(Note :My interface was working fine before patch Upgrade, after the patch upgrade its not working plz suggest)[
    /b]regards
    chaithanya

    hi all,
           <b>The error appears again in Mail Adapter(exception caught with cause com.sap.engine.services.ejb.exceptions.BaseTransactionRollbackLocalException)</b>
    , can anyone suggest wht exactly the splitmail bean does (is it sap-provided bean or can we define our own bean with specific features like i want payload data & body content in mail adapter to be visible ).
    <b>The Scenario for the interface is IDOC to Mail.
    IDOC is transformed by XI and mapped to a target message, and then it
    is send as a mail with file attachment to various customers via the
    MAIL Adapter</b>
    The above discussed content is I should receive mail in the mail server as an attachement(which consists of idoc data) , in the body of the mail it should be the
    text with 2  or 3 lines.
    Regards
    Chaithanya

  • Usage says mail app 2.4GB

    I'm using an ipad2 with Os 7.1.1 I think.
    OF course 32GB is not enough and am trying to free up space.
    Under the settings tab - usage it lists all of your apps and how much room they require. The biggest one is mail, 2.4GB
    I have deleted every email on all three accounts I have (bulk deleting email was a doozy btw) and the program still takes up 2.4GB
    HOw do I gain back memory. There is no way mail is that memory intensive.
    thanks in advance for your assistance

    I have discovered somthing odd.
    My network was setup using a single Dlink DI-524 router sharing a 10M down / 1M up connection to a Nintendo Wii, Linux server, and 3 Windows XP pcs and my single Macbook. I noticed through the logs that the Wii connected multiple times through the wifi connection getting updates and every time that it did this it would temporarily knock my Macbook off the network causing a delay accessing Gmail's IMAP servers. This causes Mail.app to go into a loop trying to access the IMAP servers and chew up tons and tons of RAM.
    Solution. I setup a second Belkin router off one of my Dlink's ports and configured it to only allow my Macbook and AppleTV to access it. Problem solved. I have a rock solid internet connection with zero disruption to Gmail's IMAP servers. It appears with the 10.5.2 update, mail.app has developed a sensitivity to how it connects to the network. Hopefully 10.5.3 fixes it. We will have to see.
    Hope this helps.

  • Where is the TLS option in Mail?

    Hello,
    I keep seeing thing on the net indicating that Mail supports TSL, yet I can't find the setting anywhere.
    Thanks,
    -Travis

    Ah, nope, it works in Thunderbird. It is definitely a problem with Apple Mail.
    I haven't seen million of Mail users work, you are the only one who claimed it... so would you be glad to show what does one need to do in order to make Mail work?
    And yes I have tried the Google documentation, Mail just refuse to work... that's why I Google about this and found this thread.
    EDIT:
    Here's the SMTP setting I have in Mail: (Mail - Preferences - Accounts - Outgoing Mail Server)
    Description: Google
    Server Name: smtp.gmail.com
    Use Custom Port: 465
    User SSL: Checked
    Authentication: Passoword
    User Name: [email protected]
    Password: *****
    I also have tried the same thing with port 587 and port 25. And yes I have verified that I have the correct username and password.
    In "connection doctor" it said that it "Could not connect to this SMTP server", "check your connection", "if the SMTP server doesn't support SSL then uncheck SSL".
    Of course there are nothing wrong with my connection, because thunderbird works. But again thunderbird explicitly stated that it will try TLS then SSL.
    So it still seems like Mail is stupid with TLS.

  • Bt usage e mail !

    i have been on option 3 for over a year now and after a few phone calls to cancellations over the past few days renewed my contract today (wednesday). i have just got home and found an e mail saying i have gone over my option 2 broadband limit !! and when i log into my account it says im on opption 3 still but then check my usage and it says i am 11 gb over my 40gb limit !
    any suggestions ??
    can a moderator please look into this if possible as dont want any charges on my account !!
    thanks for any help

    you need to contact the mods for assistance  http://bt.custhelp.com/app/contact_email/c/4951
    If you like a post, or want to say thanks for a helpful answer, please click on the Ratings star on the left-hand side of the post.
    If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

  • High CPU usage in Mail

    I know that this topic has been discussed before, without any real cause being identified (as far as I can see). I have a specific question (at the end of the post).
    I am a light Mail user, with one POP account and I don't use to-dos, MobileMe, or anything other than simple sending and receiving of emails - no more than half a dozen per day. I leave mail open in the background, sending requests for new messages every 5 minutes
    On 6 or 7 occasions, mail has started to use all the available CPU time (per Activity Monitor), usually about 90%, and the computer starts to get hot - even when still in the background (i.e. I am not doing any message activity). Mail has to be quit (will quit normally), and when restarted it acts normally.
    This certainly happened with 10.5.3 as well as 10.5.4 - I can't remember whether it was a problem with 10.5.2. It certainly wasn't with 10.3.x.
    I wonder whether my Mail data has become damaged or corrupted in any way. So my question is: Is there any mechanism to rebuild or check the sanity of the Mail data, similar to what is available in iPhoto?
    Thanks.

    Just for the record, and in case any other users with the same problem come across this thread, the CPU usage problem hasn't recurred in the 2+ months since I rebuilt the mailboxes.

  • Tls usage requirements

    Hi,
    i can successfuly connect my spa504g to a kamailio server and get mwi notifications using UDP.
    when i use tls, i successfuly register in the the server and also subscribe to mwi events.
    i can make calls and srtp also works.
    the problem is with kamailio server sending mwi notifications to spa504g when i use tls.
    do i have to create a mini certificate and configure it in spa50g for tls mwi notifications to work ?
    i don't know if the problm is with the server or with misconfiguration in spa504g.
    the initial SUBSCRIBE event is successfulll and i can get a response (mwi light goes on if i have a vm).
    the problem seems to be when the connection is initiated by the server.
    any thoughts ? hints ?
    thank you

    Catch full log and debug messages
    Debug and syslog Messages from the SPA3xx, SPA5xxG, SPA9xx, & WIP310 IP Phones
    Just to be sure, catch the communication between exchange and phone as well (to verify that TLS is used all the times).
    Installing and Using Wireshark for Capturing Network Traffic
    It may reveal important informations to you.

  • High CPU usage for Mail/Address Book with Exchange/GMail

    I reinstalled 10.6 on my MacBook Pro because it since the upgrade from 10.5 performance has been generally lousy and I wanted to make a fresh start. I am finding that my performance problems with Mail (which connects to both Gmail and Exchange) is still poor At all times, even when Mail is not processing any connections to either mail server, it consumes about 25% CPU just being idle. Oddly, Address Book uses 25% minimum CPU at all times. Also, in Address Book, I see the contact list for my Exchange account has the progress meter spinning at all times, even after a full reboot of the computer. My Mail and Contact lists are fully synced up at this point so I am not sure what all the overhead is for. It really drags down general performance of the machine, especially when I attempt to load any complex pages in Safari where I constantly see the pinwheel. This is all pretty troubling since this is a fresh install of the OS and I actually have same problems as I had with Mail before plus I now have new problems with Address Book that I DIDN'T have before. I haven't even turned on Time Machine because after the way it affected performance on my previous install for 15 minutes out of every hour it will surely render my machine useless.
    In a word, "Help".

    My problem doesn't align exactly with yours, but I'd suggest you try this anyway (especially if you aren't using RSS within Mail - this is sure to blow away any Mail.app RSS feeds):
    +So, if you see the Mail application growing in size until it aborts, it appears that the most direct fix is to quit Mail and delete the ~/Library/Mail/AvailableFeeds and ~/Library/Mail/AvailableFeeds-journal files. No reboots or other actions are required.+
    Details? See: http://discussions.apple.com/thread.jspa?messageID=10976938&#10976938

  • My Iphone 5 has mail usage at 7.2KB. I have no messages on my phone. Why is it using so  much space?

    my Iphone 5 has mail usage at 7.2KB. I have no mail in mail box. Why is it taking up so  much space? My IPAD has 10,000 message and my usage for mail there is 535 MB, What's wrong with my Iphone 5?  Thanks

    Yes I made a major typo it's at 7.2 GB NOT KB!! Thx for any suggestions and advise!

  • Why does my Mail Usage show 2.1 Gb but I only have 6 emails in there, no trash and no sent files left in there?

    So I'm trying to clean up my phone as far as free space. I've got 6 emails in the mail and I've cleaned out all my sent messages and trash. Yet under usage, it still shows 2.1Gb of usage for mail.
    I'm using iOS 7 on an iPhone 4S.
    Thnx

    Hi JerryFlyGuy,
    i have the same problem did you find a solution?
    thanks

  • TLS problems with OIM mailing through exchange server

    Dear All,
    I ran into a problem concerning the internal mailing mechanism Oracle provides in OIM.
    Im trying to send email definitions through a custom made mail adapter.
    Each time i send it i get a 530 5.7.1. Client was not authenticated error.
    We narrowed it down to it being a TLS error since this is required by the exchange mail server we use.
    When we turn TLS off the mails are being sent but when it it turned on again the error returns.
    it seems the used provider, the javax.mail.provider com.sun.mail.smtp.SMTPTransport does not issue a TLS session.
    sun also has an SMTPSSLTransport provider but i dont now where i can config oracle to use that one instead of SMTPTransport (or even if this will solve the issue).
    Thanks in advance.

    I am actually using that, and sending works fine aslong as TLS is turned off on the exchange server.
    When it is turned on i get the 530 5.7.1 client not authenticated error, presumably caused by the Sun SMTPTransport driver used by the internal mechanism of Oracle IDM.
    So im wondering whether it is possible to say to OIM: dont use the SMTPTransport driver but the SMTPSSLTransport driver (which hopefully can handle TLS calls)
    Anyone? (or clues on how to solve it another way)

  • IPHONE 5 MAIL USAGE EXCESSIVE

    If I check the usage under settings, general, usage - my mail shows over 400mb but I have only a few messages in the mailboxes.
    How do I reduce this usage anyone?
    Thanks

    I guess that maybe one way but it does seem drastic - Im wondering why it shows 400mb usage when clearly thats not the case - maybe someone else has an idea?

  • Ipad email usage at 1.7 GB and I have emptied all mail boxes

    I noticed usage for mail had reached 1.7GB so I deleted all inbox and all sent and all trash.. So nothing in any mailboxes .. But still usage not changed?  Why not?

    So in the end I had to delete the email account. This freed up the space. Created account again.. Not ideal but free up 1.7GB space

  • Mail & Mavericks & Keychain Access

    Hello,
    After updating to Mavericks (from Mountain Lion), I noticed that there's a new keychain called "local items" inside Keychain Access App.
    so I have a couple of questions regarding this and my usage of Mail:
    1) from what I read in this forum, "local items" is the keychain created by Mavericks, it should sync to the login keychain (which is usually, and certainly in my case, the default keychain, meaning it is in bold face on the left hand side of the Keychain Access window). And as far as I understand, if you have icloud enabled, this keychain would be called "icloud keychain", if not, it will remain the name "local items", is this correct? I do not want to have anything to do with icloud, so I don't have any icloud keychain. When I log into the my account on the mac both the login and the "local items" keychain are unlocked (I guess this makes sense if they are supposed to be synced. So basically this is my understanding of this "local items" keychain, please correct/inform me if this understanding is not correct.
    2) now, I noticed that the passwords that I typed in for my e-mail accounts (set up in Apple's Mail) are saved inside this "local items" keychain. So everything seems to be fine. However, I noticed that the passwords saved inside this "local items" keychain cannot be edited in the "access control" panel (this is accessed by double clicking the password item and click on the "access control" tab.) This is odd because all the other items in the "login" keychain can be edited in this way.
    3) so my main goal is to ask Mail to NOT remember my password (I know this is not the prefer setting for most users, but I prefer to have it this way). In Leopard, Mail had a little checkbox where you set up your account that asks the application to NOT remember the password. This is really handy because it prompts me to re-enter the password whenever I restart the application, which is exactly what I want it to behave. But since upgrading to Mountain Lion (I'm not sure how it is in Snow Leopard or Lion, as I jumped from Leopard straight to Mountain Lion, and now to Mavericks), this box has disappearred. I found a work around online. Before Mavericks, the mail account passwords are saved (if I remember correctly) in the login keychain, the work around works by saving (i.e. dragging) all your email  passwords into a separate/new keychain (let's call it Keychain A) which has a different password than your login keychain (which, by definition, is unlocked upon login). So I set this up and Mail automatically knows to prompt me to enter the password for Keychain A in order to access my e-mail account passwords. This doesn't behave exactly like unchecking "remember the password" box in Leopard, but it comes close. and I was happy with this work around. However, now having upgraded to MAvericks, Mail insisted on using "local items" as keychain, and keeps asking me the passwords for my e-mail accounts (NOT the  local item keychain password, since my local item keychain IS synced up with Login keychain, therefore they are both unlocked upon me logging in) so that it can store them. The thing is I do NOT want the e-mail passwords to be stored inside "local items" keychain (because I don't want account access to equal e-mail access (for reasons I do not want to get into, but I feel like this is not too much to ask and was possible before so why not now?).
    Could someone please help me out with this?  I've called Apple, and they were quite annoyed with me because the person I talked to keeps saying that I'm not using keychain for the way it is suppoed to be used, but my question then, is, if I canot get applications to use special keychains I set up, what's the use of the function "add new keychain" inside keychain access?  (in fact, the phone supporter basically keep saying "I don't know" to my questions and finally offered me to talk to a senior advisor, at that point I had to leave (and after 1hour on the phone I was quite fed up anyway). so I thought I should turn to the forum.....
    so a recap/summary:
    my login and local items keychain sync up fine
    but I don't want Mail to store my e-mail passwords in the local items keychain
    I want to make Mail use another keychain (i.e. a keychain I set up myself), can we possible to this?
    or another other work around that will make Mail to prompt me to enter passwords when I fire up the application (not constantly, but just when I restarting the application, OR after the computer wakes up)
    I'd appreciate any pointers!
    thank you very much!
    sakura

    I have the same concerns.  I'm frustrated that the Mail app doesn't currently allow you to use a separate keychain for the passwords.  After many years with Keychain I am being tempted to look to a third party.  Or perhaps it's time to look for a third party mail app?  This is a security issue since email is the primary way that a password change is verified with other accounts. 

Maybe you are looking for