Jump to content

SmartPhone 2003 Secure SMTP support is broken


Recommended Posts

Guest blowdart
Posted

http://idunno.org/displayBlog.aspx/2004011801

http://www.faqs.org/rfcs/rfc3207.html

RFC3207 4.2 states

"The client SHOULD send an EHLO command as the first command after a

successful TLS negotiation."

SmartPhone 2003 doesn't.

Sun 2004-01-18 19:52:50: [564:2679:1] <-- EHLO Inbox


Sun 2004-01-18 19:43:58: [516:2662:1] <-- STARTTLS


Sun 2004-01-18 19:43:58: [516:2662:1] --> 220 Begin TLS negotiation


Sun 2004-01-18 19:44:00: [516:2662:1] SSL negotiation successful (SSL


3.0, 1024 bit key exchange, 128 bit RC4 encryption)


Sun 2004-01-18 19:44:03: [516:2662:1] <-- AUTH LOGIN


Sun 2004-01-18 19:44:03: [516:2662:1] --> 503 Unexpected command or


sequence of commands.


Sun 2004-01-18 19:44:04: [516:2662:1] <-- QUIT


Sun 2004-01-18 19:44:04: [516:2662:1] --> 221 See ya in cyberspace

Nice huh?

Guest blowdart
Posted

Ah the joys of trying report this to Orange. Mr Orange please take note, and email me if you want details.

Yet again data support have shown a complete lack of knowledge at level 2, to the extent of bullshitting the poor level 1 people.

Sorry sir you must use our SMTP server (except I don't want SMTP, I want S-SMTP, which is on another port which you do not firewall)

It will be because it's not a POP server (except POP is incoming, SMTP is outgoing)

You'll have to email the generic customer support email (where it will no doubt get lost, even though I have detailed logs, I can demonstrate the problem and I know where it is broken).

Why is it so hard to report any technical problem to data support? I still haven't had the promised call back or email from the "Your SMTP server cannot email address [email protected]" problem I logged 2 weeks ago.

No-one will give me a specific, useful email address, I won't get bumped to level 3 (despite level 2 basically getting it all wrong) and I'm sure the support person I talk to is getting as pissed off as I am.

Guest blowdart
Posted

And this is the response to my email

From what you have stated in your mail, it seems you are experiencing  

difficulties with using a secure mail server.

I would like to inform you that, due to the inbuilt software provided by  

Microsoft, we are unable to support mail using SSMTP.  We also are not  

able to support IMAP4.  

We are only able to support access to very basic e-mail services such as  

standard POP3 e-mail

If you wish to try and develop this, I would advise that you visit either the  

Microsoft website, or www.developers.orange.co.uk.

I am sorry that we are unable to assist you any further in this matter.

I trust this information is of assistance to you

It's wrong on so many levels.

Mr Orange if you're reading this why is it so hard to get technically competant support? This response shows that support don't even know what the phone is capable off. Don't they have a spec sheet? An FAQ? No IMAP, no S/SMTP :roll:

Guest Kallisti
Posted

It appears to me as if Orange are selling the SPV as a basic phone, and denying any support or guarantees of funcationality on extended services. For example, they just point blank refuse to allow VPN ports through their GPRS. This is an advertised function of the phone which doesn't work due to port blocking on their services.

I guess this is the same boat that you're in with this. I've no experience of either SSMTP or IMAP, so I don't know what the issues are, but it looks as if orange are saying that they don't guarantee that this part of the product they advertise and sell will work.

FWIW, this is fairly plainly illegal under UK law. Taking them to task over it would be a bit difficult, but I'd imagine it would be possible to gain small claims court damages to the extent of the phone contract if someone was willing to push it that far.

Guest blowdart
Posted
I guess this is the same boat that you're in with this.  I've no experience of either SSMTP or IMAP, so I don't know what the issues are, but it looks as if orange are saying that they don't guarantee that this part of the product they advertise and sell will work.

The thing is they're not firewalling those ports. IMAP works (despite support saying it doesn't) and Secure SMTP does make the connection, it's just the protocol implementation is broken.

All I want them to do is acknowledge the fault and pass it on to MS for fixing. Apparently they're not even capable of doing that.

  • 2 months later...
Guest surjeon
Posted

If you're in control of the SSMTP server you're connecting to, and can configure it as you like, try setting up for SMTP-after-POP (or SMTP-after-IMAP). The TLS connection to the SMTP server gets set up fine, but then (despite the 'outgoing server requires auth' option) the client doesn't try authing at all (ie. doesn't attempt SASL auth), but instead makes an authenticated IMAP (or POP3?) connection.

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.