How to set up secure mail settings

[Tom Young]

Although I have completed set up the secure mail settings on my PC in Outlook 2007 using the PDF instructions provided, I need instructions for doing the set up for both my I Pad and S5 Android.

[ILoveHostasaurus]

Re: How to set up secure mail settings

In both cases, typically you'll just need to edit the account properties and change the server name, port number and security type.

On the android side, if you had been using POP3, change the port number from 110 to 995. If you had been using IMAP, change the port number from 143 to 993. There should be a 'security type' drop down box where you can change it from none to "SSL/TLS (accept all certificates)", or, just "SSL/TLS" but then a name change will be needed for the server name because the name on the certificate will not match what is probably currently mail.tkyoung.com or similar. If that is necessary, the name should change to web020.mivamerchant.net in your case.

The ipad should be very similar looking dialog boxes and values; I can try to find one to give you the specifics if you cannot find the right setting area.

[Tom Young]

Re: How to set up secure mail settings

In both cases, typically you'll just need to edit the account properties and change the server name, port number and security type.

On the android side, if you had been using POP3, change the port number from 110 to 995. If you had been using IMAP, change the port number from 143 to 993. There should be a 'security type' drop down box where you can change it from none to "SSL/TLS (accept all certificates)", or, just "SSL/TLS" but then a name change will be needed for the server name because the name on the certificate will not match what is probably currently mail.tkyoung.com or similar. If that is necessary, the name should change to web020.mivamerchant.net in your case.

The ipad should be very similar looking dialog boxes and values; I can try to find one to give you the specifics if you cannot find the right setting area.

I have been successful in making the necessary changes to my S5 to receive email, however, need additional information in order to be able to send from my account.

Unfortunately, the above instructions have not worked for my ipad.

[ILoveHostasaurus]

Re: How to set up secure mail settings

On the sending side, you'll want port 587 and TLS enabled. What version of iOS do you have on your iPad? I'll try to get you the setup steps.

[Tom Young]

Re: How to set up secure mail settings

On the sending side, you'll want port 587 and TLS enabled. What version of iOS do you have on your iPad? I'll try to get you the setup steps.

I already had port 587 and TLS enabled, but it will not send. What should be in the SMTP server box?

My iPad version is: 8.1.2 (12B440)

[Rick Wilson]

Re: How to set up secure mail settings

Tom,

This is going to require David to figure out what's wrong and he's up against an incredibly tight deadline this week. It'll probably be another day or two before he can dig in.

[Tom Young]

Re: How to set up secure mail settings

Tom,

This is going to require David to figure out what's wrong and he's up against an incredibly tight deadline this week. It'll probably be another day or two before he can dig in.

Hello Rick,

Thanks for the update.

My guess is that, with the variety of mobile devices out there, I am likely not the only one being challenged with this.

PDF instructions for mobile device setup modeled after those provided in the link to the Knowledgebase in the January 21st email announcing these changes may be the way to go. It would help if this were to be made available with a link on the MIVA Merchant Administration home page.

I'll be on the lookout for more information.

[Conard]

Re: How to set up secure mail settings

I think I may be missing something, I didn't receive an email about changing our settings to secure mode for email.

[lesliekirk]

Re: How to set up secure mail settings

the PDF instructions provided

Was this case specific?

[Rick Wilson]

Re: How to set up secure mail settings

Yes, this is on a server by server basis, so you'll get an email with roughly a one week notice when you'll need to update your settings.

[ILoveHostasaurus]

Re: How to set up secure mail settings

Tom, for you specifically, try using web020.mivamerchant.net as the server name in your email software. I've been told that we believe the issue is your client not liking the fact that when it connects to the mail server securely, it sees a certificate issued to that server name instead of mail.tkyoung.com. If you've already done that, please email me your helpdesk ticket number and we'll get whomever's working on it in front of an iPad at the office so they can plug the settings in directly to test.

[Tom Young]

Re: How to set up secure mail settings

Yes, this is on a server by server basis, so you'll get an email with roughly a one week notice when you'll need to update your settings.

Is it reasonable to expect currently known bugs to be resolved before additional servers will be changed?

[Rick Wilson]

Re: How to set up secure mail settings

I don't understand your question Tom? Bugs as in the core software? or bugs as in poor instructions for configuring these updated email servers?

[ILoveHostasaurus]

Re: How to set up secure mail settings

Is it reasonable to expect currently known bugs to be resolved before additional servers will be changed?

There are certainly known compatibility issues with some email clients when required to use stronger encryption than was commonplace when they were released. For example, Outlook 2003 and older will not work with today's strong encryption ciphers on any guest operating system, and any version of Outlook on Windows XP cannot connect to our servers at all once the stronger encryption is required because it uses the Windows XP encryption libraries instead of its own. That is an unavoidable problem when you have code written a decade ago that only supports encryption with known vulnerabilities, and a server that can no longer use those known-vulnerable ciphers.

We try to maintain as much compatibility as we can for any software our clients may use that interacts with our servers, whether it be email programs, web browsers, SFTP, etc., but when given encryption protocols have exploits published, or even things as simple as CPU horsepower has increased to the point where a protocol is no longer able to be considered secure, we have no choice but to update servers rather than let our customers be vulnerable. For example, we would not want you to sit down at a wifi hotspot and have your email password stolen any more than you would, but it would be especially troublesome if it were a result of us intentionally leaving weak protocols enabled for the sole purpose of letting Outlook on Windows XP continue to connect.

[Rick Wilson]

Re: How to set up secure mail settings

On that note, it's worth mentioning for anyone who reads this in the future. If you're running an ecommerce store using XP to access your admin interface (Miva or non-Miva).

Stop.

Now.

Don't ever do it again as it's not safe.