Telecom changes to email: SSL required

Forums › Spark New Zealand (including Skinny and BigPipe) › Telecom changes to email: SSL required

1 | 2 | 3 | 4 | 5 | 6

1623 posts

Uber Geek

Trusted

#1007734 17-Mar-2014 22:24

Sideface: And I thought that the Malaysian government was incompetent ...

Maybe this is part of Telecom's master plan - get all the incompetent things out of the way now before they change their name to Spark so then they can start with a clean slate.

"When the people are being beaten with a stick, they are not much happier if it is called 'the People's Stick'"

dan

1134 posts

Uber Geek

Lifetime subscriber

#1007741 17-Mar-2014 22:51

had a call with the same problem with certificate / pop3r.xtra.co.nz - however even after install of incorrect certificate it doesn't stop the message from reappearing after outlook is closed and reopened - Outlook 2010 SP2.

true to form of last few weeks, with your officemail email system outages, your not updating the service status page with that particular issue in a timely fashion

The notice you do have re the email change to SSL in the service status, has 2 incorrect hyper-links in the status message for telecom.co.nz/SSL going to a "page not found" because they are
not linked properly

When i did actually get to the right page and choose the mail client to get the settings, that wasn't even loading properly either, took multiple tries, on both their telecom connections and my SNAP connections

Seems like you guys could try a bit harder

freitasm

BDFL - Memuneh
79270 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1007798 18-Mar-2014 07:40

The mystery deepens... Someone pointed that THERE IS a pop3r.xtra.conz server there (and other aliases):

 
Name:    pop-secure-ssl-tnz.mail.gm0.yahoodns.net 
Address:  124.108.96.123 
Aliases:  pop3r.xtra.co.nz 
	  pop3r.tnz.yahoo.com 
 
Name:    pop-secure-tnz.mail.gm0.yahoodns.net 
Address:  124.108.96.122 
Aliases:  pop3.xtra.co.nz 
	  pop3.tnz.yahoo.com 
	  pop3-tnz.mail.yahoo.com

Are you folks sure you(your friends|your customers)haven't entered a typo? If not a typo then certainly a misconfigured pop3 server sharing the certificate with pop3r...

MikeB4

18435 posts

Uber Geek

ID Verified

Trusted

#1007839 18-Mar-2014 08:35

In outlook 2011 I get a message saying unable to connect to server then it proceeds to download email. I have set the client for SSL

mattwnz

20153 posts

Uber Geek

#1010034 20-Mar-2014 17:13

Anyone else having toruble logging into the pop server. I have been getting regular popup boxes in Outlook asking to enter my username and password again. It is intermittent, so sometimes it connects, and sometimes doesn't.

Jase2985

13459 posts

Uber Geek

ID Verified

Lifetime subscriber

#1010121 20-Mar-2014 20:16

mattwnz: Anyone else having toruble logging into the pop server. I have been getting regular popup boxes in Outlook asking to enter my username and password again. It is intermittent, so sometimes it connects, and sometimes doesn't.

mines having intermittent issues

LennonNZ

2459 posts

Uber Geek

ID Verified

Trusted

#1010163 20-Mar-2014 21:07

Testing the Server connecting to pop3.xtra.co.nz it will go to one of 5 servers and the certificates all look ok. Maybe they have resolved the problem or I didn't try long enough to get any more servers.. All the certs look correct.

Also to note if you try and connect too many times.. they will rate limit you and disallow you for a certain time ie

"ERROR: Your IP has been rate-limited! Please try again later" and your email client will really get confused!! so maybe this is one of the problem being are having apart form the SSL stuff?

One thing I don't understand is how is this suppose to be more secure than not having SSL? If someone gets someone else's username/password (i.e. your machine is infected with virus or alike) using SSL make no difference. This will protect people from being sniffed on untrusted networks only.

S:+OK hello from popgate-0.8.0.504347 pop102.tnz.mail.sg3.yahoo.com
certificate: subject: /C=NZ/ST=Auckland/L=Auckland/O=Telecom Corporation of New Zealand Limited/OU=WebApps/CN=pop3.xtra.co.nz issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

S:+OK hello from popgate-0.8.0.504347 pop103.tnz.mail.sg3.yahoo.com
certificate: subject: /C=NZ/ST=Auckland/L=Auckland/O=Telecom Corporation of New Zealand Limited/OU=WebApps/CN=pop3.xtra.co.nz issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

S:+OK hello from popgate-0.8.0.504347 pop101.tnz.mail.sg3.yahoo.com
certificate: subject: /C=NZ/ST=Auckland/L=Auckland/O=Telecom Corporation of New Zealand Limited/OU=WebApps/CN=pop3.xtra.co.nz issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

S:+OK hello from popgate-0.8.0.504347 pop111.tnz.mail.aue.yahoo.com
certificate: subject: /C=NZ/ST=Auckland/L=Auckland/O=Telecom Corporation of New Zealand Limited/OU=WebApps/CN=pop3.xtra.co.nz issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

S:+OK hello from popgate-0.8.0.504347 pop109.tnz.mail.aue.yahoo.com
certificate: subject: /C=NZ/ST=Auckland/L=Auckland/O=Telecom Corporation of New Zealand Limited/OU=WebApps/CN=pop3.xtra.co.nz issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

raytaylor

4014 posts

Uber Geek

Trusted

#1010300 20-Mar-2014 23:22

LennonNZ:

One thing I don't understand is how is this suppose to be more secure than not having SSL? If someone gets someone else's username/password (i.e. your machine is infected with virus or alike) using SSL make no difference. This will protect people from being sniffed on untrusted networks only.

It makes people "think" telecom are doing something. My theory is that the media will hear the word 'making secure' then refer to all the previous hacking events in an article and hopefully that will nullify said hacking events from the laymans perspective.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

mattwnz

20153 posts

Uber Geek

#1010303 20-Mar-2014 23:32

raytaylor:
LennonNZ:

One thing I don't understand is how is this suppose to be more secure than not having SSL? If someone gets someone else's username/password (i.e. your machine is infected with virus or alike) using SSL make no difference. This will protect people from being sniffed on untrusted networks only.

It makes people "think" telecom are doing something. My theory is that the media will hear the word 'making secure' then refer to all the previous hacking events in an article and hopefully that will nullify said hacking events from the laymans perspective.

Well as Yahoo hasn't disclosed the reason for why peoples accounts got hacked, I guess TC have no choice but to show that some additional security has been put in place. But I recall reading that they did say that this 'new' security using SSL doesn't have anything to do with the hacking.

raytaylor

4014 posts

Uber Geek

Trusted

#1011376 23-Mar-2014 14:37

mattwnz: Anyone else having toruble logging into the pop server. I have been getting regular popup boxes in Outlook asking to enter my username and password again. It is intermittent, so sometimes it connects, and sometimes doesn't.

Yes.
Have had about 5 calls today (on a sunday when I am in bed with the flu) from customers who use @xtra email addresses -
I have verified all their passwords work at http://webmail.xtra.co.nz but none through pop3+ssl in outlook.

Once remoting into their computers and checking their settings, I am just having to refer them back to telecom on 0800-22-55-98

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

mattwnz

20153 posts

Uber Geek

#1011416 23-Mar-2014 15:33

raytaylor:
mattwnz: Anyone else having toruble logging into the pop server. I have been getting regular popup boxes in Outlook asking to enter my username and password again. It is intermittent, so sometimes it connects, and sometimes doesn't.

Yes.
Have had about 5 calls today (on a sunday when I am in bed with the flu) from customers who use @xtra email addresses -
I have verified all their passwords work at http://webmail.xtra.co.nz but none through pop3+ssl in outlook.

Once remoting into their computers and checking their settings, I am just having to refer them back to telecom on 0800-22-55-98

Now that is dedication to the job :)

nunz

1421 posts

Uber Geek
Inactive user

#1011642 24-Mar-2014 10:39

mattwnz:
raytaylor:
mattwnz: Anyone else having toruble logging into the pop server. I have been getting regular popup boxes in Outlook asking to enter my username and password again. It is intermittent, so sometimes it connects, and sometimes doesn't.

Yes.
Have had about 5 calls today (on a sunday when I am in bed with the flu) from customers who use @xtra email addresses -
I have verified all their passwords work at http://webmail.xtra.co.nz but none through pop3+ssl in outlook.

Once remoting into their computers and checking their settings, I am just having to refer them back to telecom on 0800-22-55-98

Now that is dedication to the job :)

And telecom will tell them they have incorrect settings and spend hours talking them through it .....

we have had clients with the same issue. Get them to log on via their web portal. They seem to be doing some dipstick thing where you have to log onto the portal web mail to get pop mail working. I had a mess of a time figuring out their dumb captcha.
Shane

raytaylor

4014 posts

Uber Geek

Trusted

#1011715 24-Mar-2014 12:06

we have had clients with the same issue. Get them to log on via their web portal. They seem to be doing some dipstick thing where you have to log onto the portal web mail to get pop mail working. I had a mess of a time figuring out their dumb captcha.
Shane

Been like that for a couple of years now.
If someone tries to log into your pop3 account with the wrong username or password, it locks you out and so you have to go to the website to unlock it.
The difference here is logging into the webmail does not solve the pop3 password authentication issue - it still rejects the user.

Two major problems I see every week with that
1) Someone will leave an old password programmed into a phone causing it to lock themselves out
2) Someone will attempt to try random passwords on the account from anywhere in the world and will lock the account out.

So if i felt a little annoyed with someone, i could just randomly try a bunch of passwords against the pop3 account with outlook and cause that person to get locked out. Not something I would do, but a major flaw in telecom's thinking.
Hackers constantly do this, so I have to assist someone with logging into their webmail at least once a week.

I even see it on our email server- except we are a little smarter. We lock out the source ip address for 30 minutes on the 5th wrong password attempt, and dont lock out the account. This drastically slows down a brute force botnet to the point its just not feasible.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

mattwnz

20153 posts

Uber Geek

#1014269 28-Mar-2014 00:16

I have been getting these popup logins from outlook all night from my Xtra email account . There has got to be something wrong with their pop servers to cause this problem so regually, as other email accounts with other email providers don't have this problem.

surfisup1000

5288 posts

Uber Geek

#1014283 28-Mar-2014 01:34

I use windows live mail for telecom xtra via imap.

Tonight , it stopped working. I get a message that the server rejected my login.

I checked my settings and they are correct (and i changed nothing since I setup the account).

I'll retry tomorrow, 9 times out of 10 these issues get fixed.

1 | 2 | 3 | 4 | 5 | 6