[Best viewed with a browser]

Using SSL when Retrieving Email

The term SSL stands for secure sockets layer, which describes a mechanism for encrypting data transfers on the Internet. Often used for secure transaction websites (those whose URL begins with "https:" rather than "http:"), you can now use SSL to provide additional security when retrieving your email from the a2i servers.

To activate SSL wrapping for your email client, please check the instructions listed below. For your convenience the list is organized by operating system and client. If your client is not listed, we have included a few hints to help you find how to activate SSL wrapping.

Remember: even if your client does not support SSL at this time, you still benefit from the existing security standards that a2i has in place.

Certificates

The instructions in this document sometimes mention a 'certificate'. Your mail client may print a warning about the certificate presented by the POP or IMAP server. It's possible to suppress these warnings by installing our SSL certificate into your machine or mail client. Try pointing your mail client (if it understands web pages too), or your standard web browser, towards our "install certificate" link below, and when prompted, tell it to open and/or install the certificate. This should install the SSL certificate on your machine. The same certificate is also used for our webmail interface, so once you install it, you should also get seamless connections to our webmail interface.

WindowsNT 4.0

Eudora 5.1

Eudora 5.1 will not allow SSL connection to a self-certified IMAP or POP server. Do not make any changes to your options.

Netscape Mail 4.7

Netscape Mail 4.7 will not allow SSL connection to a self-certified IMAP server and has no option for SSL to any POP servers. Do not make any changes to your options.

Outlook Express 5.5

Go to Tools->Accounts and highlight your rahul.net account (it may show up as your incoming mail server name, either imap.rahul.net or pop.rahul.net), then click on the button labeled 'Properties.' You will then see several tabs; select the one labeled 'Advanced.' Under 'Server Port Numbers' and 'Incoming Mail' check the box labeled "This server requires a secure connection (SSL)." When you do so, the port number will change automatically. If you are using imap.rahul.net, the port number will change from 143 to 993; if you are using pop.rahul.net the port number will change from '110' to '995.'

Please note that when you retrieve new mail, a warning message appears notifying you that the certificate may be insecure. In this case it is because our servers are self-certified. You can click on past to receive the mail.

PC-PINE 4.44

From the main menu select S (for 'Setup') and then C (for 'Configure'). Scroll down to the value for 'inbox-path' and press Return to to edit the value shown. Backspace to delete the value shown and enter one of the following values, including the curly brackets, where USERNAME is your own login id.

POP server, SSL enabled

{pop.rahul.net/service=pop3/ssl/novalidate-cert/user=USERNAME}INBOX

IMAP server, SSL enabled

{imap.rahul.net/ssl/novalidate-cert/user=USERNAME}INBOX

IMAP server, SSL not enabled

{imap.rahul.net}INBOX

POP server, SSL not enabled

Not supported

After entering the appropriate value, press 'Return' to accept the new value, and then E and 'Return' to exit the Set-up menu. To activae the new settings, exit PC-PINE and re-launch it. You will be prompted to enter your password before PC-PINE opens a window and then again after the window opens but before you can reach your inbox. Once you are connected, PC-PINE will display a plus sign (+) in the upper right-hand corner of the window to denote an SSL-secure POP or IMAP connection. When you connect to a non-SSL encrypted IMAP session, you will not be prompted a second time (nor will you see a plus sign).

Guidelines for other clients

Within your email client SSL check boxes will often be located in with your mail server information. You should look for labels that say things like "use secure connection" or "Use SSL." These may not be visible until you click on a button or tab labeled "Additional options" or "Advanced." You can also use the Help Index by searching on the term "SSL."

Windows2000

Mozilla Mail 1.2a

From the menu bar select Windows->Mail & Newsgroup and then in the Mail & Newsgroups menu bar select Edit->Mail & Newsgroups Account Settings.... You'll see a window a white column on the left-hand side. In that column click on the box next to your account; you will then see a list of options drop down below it. Select 'Server Settings' from that list. On the right-hand side of the window in the grey area you'll see a check box labeled 'Use secure connection (SSL).' Click on this box and then click on the 'OK' button to apply and save your selection. NOTE: The 'Port:' number will not show the change until the next time you open this window.

Netscape Mail 6.2

From the menu bar select Tasks->Mail & Newsgroups and then in the Mail & Newsgroups menu bar select Edit->Mail & Newsgroups Account Settings.... You'll see a window with a white column on the left-hand side. In that column click on the box next to your account; you will then see a list of options drop down below it. Select 'Server Settings' from that list. On the right-hand side of the window in the grey area you'll see a check box labeled 'Use secure connection (SSL).' Click on this box and then click on the 'OK' button to apply and save your selection. NOTE: The 'Port:' number will show the change immediately.

PC-PINE 4.51

From the main menu select S (for 'Setup') and then C (for 'Configure'). Scroll down to the value for 'inbox-path' and press Return to to edit the value shown. Backspace to delete the value shown and enter one of the following values, including the curly brackets, where USERNAME is your own login id.

Note: Because PC-PINE 4.51 behaves identically at login for both SSL-secured sessions and those that are not SSL-secured, only the SSL-secured inbox-path values are listed below.

POP server, SSL enabled

{pop.rahul.net/service=pop3/ssl/novalidate-cert/user=USERNAME}INBOX

IMAP server, SSL enabled

{imap.rahul.net/ssl/novalidate-cert/user=USERNAME}INBOX

After entering the appropriate data, press 'Return' to accept the new value, and then E and 'Return' to exit the Set-up menu. To activate the new settings, exit PC-PINE and re-launch it. You will be shown a warning reading "Self-signed certificate or untrusted authority: Continue anyway?" Click "Yes" to accept the certificate and then enter your email password. A plus sign (+) will appear in the upper right-hand corner of your PC-PINE window indicating that you have a secure POP or IMAP connection.

Guidelines for other Windows 2000 clients

Within your email client SSL check boxes will often be located in with your mail server information. You should look for labels that say things like "use secure connection" or "Use SSL." These may not be visible until you click on a button or tab labeled "Additional options" or "Advanced." You can also use the Help Index by searching on the term "SSL."

MacOS 9.x

Outlook Express 5.5

From the menu bar select Tools->Accounts. In the 'Accounts' window that opens up, select the 'Mail' tab and then double-click on your account. In the 'Edit Account' window that opens, in the 'Receiving mail' section, click on the button labeled "Click here for advanced receiving options.' In the new window that opens click on the check box next to 'This IMAP/POP service requires a secure connection.' NOTE: when you click on the box, the Port: number shown will change automatically. Click 'OK' to save your new settings and close the window.

Guidelines for other MacOS 9.x clients

Within your email client SSL check boxes will often be located in with your mail server information. You should look for labels that say things like "use secure connection" or "Use SSL." These may not be visible until you click on a button or tab labeled "Additional options" or "Advanced." You can also use the Help Index by searching on the term "SSL."

MacOS 10.1

Eudora 5.1

Eudora 5.1 does not support SSL under MacOS 10.1 so do not make any changes to your options.

Mail 1.1

From the Mail menu bar select Mail->Preferences, then in the window that appears, highlight your account and click on the 'Edit' button. Select the tab labeled 'Account Options.' Near the bottom of the window that appears, you will see a check box lablled "Use SSL." Check the box (the port number to the left of the check box will automatically update itself). Click 'OK' and then exit the Mail Preferences window.

Mozilla Mail 1.2b

To use SSL with your IMAP connection From the menu bar select Windows->Mail & Newsgroup and then in the Mail & Newsgroups menu bar select Edit->Mail & Newsgroups Account Settings.... You'll see a window a white column on the left-hand side. In that column click on the box next to your account; you will then see a list of options drop down below it. Select 'Server Settings' from that list. On the right-hand side of the window in the grey area you'll see a check box labeled 'Use secure connection (SSL).' Click on this box (the 'Port:' value will update automatically) and then click on the 'OK' button to save and exit the 'Mail & Newsgroups Account Settings' window.

NOTE: Mozilla Mail 1.2b under MacOS 10.1 does not allow an SSL connection to pop.rahul.net. Do not make any changes to your options if you are using the POP server.

PINE 4.44

From the main menu select S (for 'Setup') and then C (for 'Configure'). Scroll down to the value for 'inbox-path' and press Return to to edit the value shown. Backspace to delete the value shown and enter one of the following values, including the curly brackets, where USERNAME is your own login id.

POP server, SSL enabled

{pop.rahul.net/service=pop3/ssl/novalidate-cert/user=USERNAME}INBOX

IMAP server, SSL enabled

{imap.rahul.net/ssl/novalidate-cert/user=USERNAME}INBOX

IMAP server, SSL not enabled

{imap.rahul.net}INBOX

POP server, SSL not enabled

Not supported

After entering the appropriate value, press 'Return' to accept the new value, and then E and 'Return' to exit the Set-up menu. To activae the new settings, exit PINE and re-launch it.

Please note: when you connect to either the POP or IMAP server through an SSL connection, you will be prompted to enter your password before you can retrieve your mail. When you connect to a non-SSL encrypted IMAP session, you will not be so prompted.

Guidelines for other MacOS 10.1 clients

Within your email client SSL check boxes will often be located in with your mail server information. You should look for labels that say things like "use secure connection" or "Use SSL." These may not be visible until you click on a button or tab labeled "Additional options" or "Advanced." You can also use the Help Index by searching on the term "SSL."


To top howto page
To a2i communications home page


$Id: ssl.email.html,v 1.13 2003/01/27 14:04:36 lrdroot Exp $
$Source: /mi/home/guest/www/howto/RCS/ssl.email.html,v $

Valid HTML 4.01!