CalMail extended deadline and further secure requirements

This announcement is for computer support personnel. A second less technical announcement will be
sent to all users later this week.

On January 18, 2005 we sent a notice to the campus mailing lists regarding the new SSL/TLS
security requirements on CalMail. Further requirements will be necessary in order to comply with
the campus security policy. The deadline for implementation of these requirements has been
extended to March 1 to allow system administrators and end users sufficient time to change the
appropriate settings.

After March 1, relaying email through the CalMail system will require secure authentication. The
authentication method to be used is SMTP AUTH (authentication) with PLAIN and LOGIN mechanisms
secured via an SSL/TLS connection. "POP or IMAP before send" will no longer be supported as an
authentication method for outgoing mail.

In addition to the above change, CalMail will now support port 587 (RFC 2476), the mail submission
port for outgoing mail.

Authentication is not required for local delivery: mail addressed to .berkeley.edu, CalMail and
CalMail hosted departmental domains. However all users should turn on SMTP AUTH with SSL/TLS in
their email client.

The configuration options are:

- Set outgoing mail server to calmail.berkeley.edu using port 587, AUTH, and STARTTLS

- Set outgoing mail server to calmail.berkeley.edu using port 25, AUTH, and STARTTLS (Using the
required, not optional setting for STARTTLS)

- Set outgoing mail server to calmail.berkeley.edu using port 465, AUTH, and SSL/TLS (In some
clients this is called "Alternate port SSL" for SMTP)

Documentation for Eudora, our primary, supported email client, and other programs is being
finalized and will be available in a few days from the CalMail Knowledge Base
(http://kb.berkeley.edu). The current versions of Eudora on software.berkeley.edu and in the 2005
Connecting@Berkeley CD support SMTP AUTH with SSL/TLS. We have just received our site installers
for Eudora 6.2.1 for Windows and Mac OS X and we will make those available as soon as possible on
software.berkeley.edu.

All feedback is welcome. If you have any concerns please contact consult@berkeley.edu or call
642-7776.

-CalMail Consulting

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about MAGNet, its meetings and events, and its
mailing list, including information on subscribing and unsubscribing,
see the MAGNet Web site at <http://magnet.berkeley.edu/>.
Received on Wed Feb 2 14:16:08 2005