History

Versions 74

Version Author Diff Last updated
v74 Antoine Beaupré
fix link to diagram
v73 Antoine Beaupré
add a horrible diagram to describe the email pass sync workflow This was built on the fly to describe to @lelutin how that stuff work, on a pad with a electronic pen, live, and could use some love.
v72 Antoine Beaupré
note that we also need to specify the CA store
v71 Antoine Beaupré
fix pre text, again
v70 Antoine Beaupré
fix pre text
v69 Antoine Beaupré
enforce mandatory verification in postfix configuration Our previous configuration did not actually check the server's x509 certificate, which is a serious flaw. `encrypt` is nice because it enforces *some* TLS, but is vulnerable to trivial active MITM attacks by anyone with an OpenSSL installation. Also expand the documentation on the security level stuff to clarify why we might want to use it.
v68 Jérôme Charaoui
service/email: rewrite apple mail submission setup this was tested with ewyatt and confirmed to work on osx 14
v67 Jérôme Charaoui
fix gmail instructions for submission server when "Secured connection using TLS" is selected, adding the account failed with the message "Couldn't reach server. Please double-check the server and port number." this might be caused because the option makes Gmail attempt StartTLS, which is not available on port 465 on the submission server: when a connect attempt is made when Gmail tests the account, "SSL_accept:error in before SSL initialization" is seen in the postfix logs When "SSL" mode is selected, adding the account and sending mail using it works as expected
v66 Antoine Beaupré
another dmarc debug tool
v65 Antoine Beaupré
start taking notes on IMAP HA (tpo/tpa/team#41009)
v64 Antoine Beaupré
tiny tweaks to postfix email client config Add a space to the password writing so it hopefully doesn't go to shell history. Also add a configuration error I stumbled upon locally.
v63 Antoine Beaupré
review the Gmail instructions following feedback from @smith Those basically worked, but I figured I would reword some of it. In particular, @smith had the first step (that seemed obvious, but is good to add explicitely anyway) of actually logging in first. Then I also split out the "edit info" button which was all in one long paragraph before (complete with a "lick" instead of "click" typo). I also made it more explicit how to "add a new address" if we're in that state, although I'm still not fully clear what happens in that situation. Other changes are stylistic and typos, mostly. See tpo/tpa/team#41183
v62 Antoine Beaupré
add a trick I found about apple mail with a friend
v61 Antoine Beaupré
add new spf validator things
v60 Antoine Beaupré
rough notes for the openpgp training (tpo/tpa/team#41141)
v59 Antoine Beaupré
move submission server tests to the howto section It's where I was looking for it and couldn't find it. I kept a ref backwards so it can still be found in the standard testing section.
v58 Antoine Beaupré
split password reset instructions from test procedures
v57 kez
Add a few small details to thunderbird setup
v56 Antoine Beaupré
more mail RFCs
v55 Antoine Beaupré
suggest TLS on port 465 instead of STARTTLS on port 587 Closes: tpo/tpa/team#40995