{"id":191,"date":"2007-09-14T13:39:43","date_gmt":"2007-09-14T18:39:43","guid":{"rendered":"http:\/\/www.clank.org\/blog\/2007\/09\/14\/mailapp-vs-starttls\/"},"modified":"2007-09-14T13:41:47","modified_gmt":"2007-09-14T18:41:47","slug":"mailapp-vs-starttls","status":"publish","type":"post","link":"https:\/\/www.clank.org\/blog\/2007\/09\/14\/mailapp-vs-starttls\/","title":{"rendered":"Mail.app vs. STARTTLS"},"content":{"rendered":"

I’m sorry, dear reader, if your eyes glaze over when you see acronyms and acronym-like things. If you aren’t interested in the usually fascinating world of email client configuration, feel free to stop reading now. I won’t feel bad.<\/p>\n

Still with me? (Seriously, this is dry stuff…)<\/p>\n

Okay, okay, I’ll get on with it already.<\/p>\n

I’ve had a problem with my mail setup for some time due to the fact that I run two separate mail servers, but they live behind a NAT device on a single IP address. It doesn’t matter what the reason is; suffice it to say that (a) I won’t use an unencrypted mail connection over the Internet and (b) it’s not possible to map the same port \u2013 in this case the IMAP SSL port, TCP port 993 \u2013 to two different machines. Thus begins my odyssey into Mac OS X’s Mail.app and IMAP account configuration.<\/p>\n

What I discovered is this: when configured with an IMAP account, Mail.app does indeed support the IMAP STARTTLS command. While I didn’t perform an exhaustive search, I believe this is not documented. Here’s how to do it:<\/p>\n

    \n
  1. Configure a normal IMAP account, if you don’t have one set up already. (It’s up to you to figure out where you can do this. This particular exercise is beyond the scope of this article.)<\/li>\n
  2. Edit the account, and on the Advanced tab, look to the bottom to find the “Use SSL” checkbox. Notice that it doesn’t mention TLS. Check it anyway.<\/li>\n
  3. Finally, change the port from 993 back to 143. Magic happens here. Just trust me.<\/li>\n<\/ol>\n

    Now, if your IMAP server supports TLS, Mail.app will automatically attempt to use it. Beware; if you are using a self-signed certificate, or a certificate that is not signed by a trusted certificate authority (CA), it appears to fail without so much as a peep as to precisely why.<\/p>\n

    With this setup, I’m now able to access both mail servers, one on port 143 with STARTTLS, and the other on port 993 with a standard SSL connection. w00t!<\/p>\n

    Enjoy…<\/p>\n","protected":false},"excerpt":{"rendered":"

    I’m sorry, dear reader, if your eyes glaze over when you see acronyms and acronym-like things. If you aren’t interested in the usually fascinating world of email client configuration, feel free to stop reading now. I won’t feel bad. Still with me? (Seriously, this is dry stuff…) Okay, okay, I’ll get on with it already. […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[4],"tags":[],"class_list":["post-191","post","type-post","status-publish","format-standard","hentry","category-geekstuff"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p706FA-35","jetpack-related-posts":[],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/posts\/191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/comments?post=191"}],"version-history":[{"count":0,"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/posts\/191\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/media?parent=191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/categories?post=191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.clank.org\/blog\/wp-json\/wp\/v2\/tags?post=191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}