Can one use Benign with SSL secure servers?

Zadok0552 · Cadet Joined: Apr 06, 2004 Posts: 1 Location: USA

I did attempt to use benign with Outlook2003 and a secure server, but it would not work.

Does anyone have experience in setting up Benign for Secure Password Authentication (SPA), and SSL?

Thanks

JimF · Cadet Joined: May 20, 2003 Posts: 6 Location: USA

It might work with SPA, but I don't think it will work with SSL. That is because SSL will still be encrypted at the B9 level, and so B9 will not be able to determine what type of attachment, if any, there is.

hamster · Posted: Tue Apr 06, 2004 9:03 pm Post subject:

BenignŽ can't work with SSL since SSL is designed to prevent "man in the middle" attacks, which is what BenignŽ does. Benign has been designed to do a few things in relation to this.

When importing an account that is set to use SSL, BenignŽ warns you that you can import this account but if you do, the SSL functionality is disabled. This means you can either continue the import, or cancel it.

SSL can be used/started in two ways, by using another connection to the server on Port 995, or by the client issuing an SSL/STARTTLS command during normal communication with the mail server on Port 110. BenignŽ does not pass on the STARTTLS command.

This all means that BenignŽ won't work on an account that requires SSL, but it does work on an account that currently uses SSL, but doesn't need to.

http://www.firetrust.com/support/benign...de228f#ssl


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 1430 pages served in previous 5 minutes. Page Rendered: 0.373 seconds.