Eudora is being weird

[redbird]

I can download my email.

When I tried to send a message, however, it told me

Connection to the mail server…, EHLO mallard.panix.com [10:36:21 p.m.]
SSL Negotiation Failed: Certificate Error: Cert Chain not trusted. Try adding this certificate to your certificate database for SSL to succeed  Unknown certificate chain validation error: Code(3015) Certificate bad: Destination host name does not match host name in certificate     Cause: (-6995)

That proved reproducible except for the timestamp, so I went in and told it to trust that certificate. Now it's telling me that Eudora got tired of waiting for the server.

Since email is being rude: stonebender: Today's mail brought me Echo and Narcissus by Mark Siegel.

Comments

[webbob.livejournal.com]

Either Panix's systems are misconfigured (probably a bad DNS record) or you've been the subject of DNS spoofing, in which case you probably just gave away your Panix password.

Probably the former, but this is another example of, "PKI isn't dead, it just smells that way." A "security" component that leads people to bypass it when it breaks, has no way of inhibiting such bypasses, and which is easy to misconfigure is not useful.

[redbird]

It now transpires that Panix has an extremely strict password algorithm: I used a song line as acronym and it was rejected because it "could be derived from the word 'fina'", for example.

I didn't particularly think it was DNS spoofing, but it was past time to change that password anyhow.