Thunderbird email client having problems with Orcon pop3 TLS service on port 995 (workaround)

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Thunderbird email client having problems with Orcon pop3 TLS service on port 995 (workaround)

rfdawn

39 posts

Geek

Lifetime subscriber

#110301 7-Oct-2012 12:31

My Thunderbird email client on Windows 7 has been having a problem with Orcon pop3 SSL/TLS port 995.
First get mail works then all subsequent getmails fail silently until Thunderbird is restarted.
Full detail is at http://bit.ly/RIKKUm
Workaround is to use Thunderbird Tools/Options/Config Editor to set:
security.enable_tls_session_tickets false
then restart Thunderbird.
This does not reduce security, just microscopically increases overhead.
Orcon website indicates no Orcon support for Thunderbird email client.
So, geekzone it is - there must be other Orcon+Thunderbird users out there.

rfdawn 7-Oct-2012

kfella2000

495 posts

Ultimate Geek

#697468 7-Oct-2012 14:15

Not sure if Orcon have 2 types of email accounts with different settings but I use Thunderbird for my email accounts and the settings I use for Orcon are

Server name: POP3.orcon.net.nz Port 110
Then my username

Security Settings

Connection security: None
Authentication method: password transmitted insecurely

I have never had SSL/TLS and port 995 set for Orcon and have had no problems. Incidentally I have just received an email into my Orcon inbox as I have been typing this.

Sharesies kids

Free kids accounts - trade shares and funds (NZ, US) with Sharesies (affiliate link).

rfdawn

39 posts

Geek

Lifetime subscriber

#697473 7-Oct-2012 14:31

Yes, port 110 is alternate connect port and has been working OK.
Only problem with 110 is there is no encryption of username/password.
This is probably OK at home, using Orcon connection only.
I have set up my laptop with port 995 to get more security.
That is the TLS option doing encryption, which is fairly
important when using strange wireless nets or 3G.

Ragnor

8085 posts

Uber Geek

Trusted

#697538 7-Oct-2012 18:40

kfella2000: Not sure if Orcon have 2 types of email accounts with different settings but I use Thunderbird for my email accounts and the settings I use for Orcon are

Server name: POP3.orcon.net.nz Port 110
Then my username

Security Settings

Connection security: None
Authentication method: password transmitted insecurely

I have never had SSL/TLS and port 995 set for Orcon and have had no problems. Incidentally I have just received an email into my Orcon inbox as I have been typing this.

Lots of ISP email is setup this way but it's really bad security to send your user name and password in clear text over the internet is, especially if out and about using wifi hotspots, hotel or cafe internet etc.

Kyanar

3874 posts

Uber Geek

Trusted

#697712 8-Oct-2012 07:44

Have you considered attempting IMAPS instead?

https://www.orcon.net.nz/support/gfaq_page/pop_imap_settings

POP is so outdated, and I've not had any problems with using IMAPS servers in Thunderbird.

rfdawn

39 posts

Geek

Lifetime subscriber

#697730 8-Oct-2012 09:24

That is a very sensible answer and explains why nobody else seems to have this obscure problem.

My excuse is a fondness for nostalgic and obsolete protocols but I plan to adapt soon.

Those Orcon IMAP settings include TLS on the outgoing SMTP connection, so now I curious to find out if TLS session tickets are ever re-used and what happens if they are. This will take me a while, but will be fun.

Expect a long silence .....

rfdawn

39 posts

Geek

Lifetime subscriber

#697809 8-Oct-2012 12:28

After trying IMAP, I would say that IMAP users should not see this problem. IMAP client keeps the TCP session open so the server stays happy about the same TLS session ticket. It is only POP, closing the TCP session then starting a new one with the same ticket, that has problems. I think server should handle this nicely by falling back to full handshake but it doesn't - just drops the session with FIN reply.

But I have rediscovered my reason for preferring POP: it allows me to configure my various mail services so that incoming mail all arrives in one global inbox. Thunderbird with IMAP seems to enforce multiple inboxes, which I dislike. So I will persist with POP plus TLS plus my config hack...