Eudora is being weird

[redbird]

I can download my email.

When I tried to send a message, however, it told me

Connection to the mail server…, EHLO mallard.panix.com [10:36:21 p.m.]
SSL Negotiation Failed: Certificate Error: Cert Chain not trusted. Try adding this certificate to your certificate database for SSL to succeed  Unknown certificate chain validation error: Code(3015) Certificate bad: Destination host name does not match host name in certificate     Cause: (-6995)

That proved reproducible except for the timestamp, so I went in and told it to trust that certificate. Now it's telling me that Eudora got tired of waiting for the server.

Since email is being rude: stonebender: Today's mail brought me Echo and Narcissus by Mark Siegel.

Comments

[cheshyre]

I've been having problems connecting to Panix (shell) all night. There's probably something wrong on their end.

[stonebender.livejournal.com]

Ok, got it!

[redbird]

I got impatient enough to tell it to send mail without any SSL checking, so the message should be on its way to California.

cheshyre, I think you're right--when I brought up ssh and logged in to the shell, panix5 was crawling.

[avram]

I think Panix is being weird. I'm using Apple's Mail.app, and I was unable to send email last night till I turned off SSL. I haven't tried it today.

OK, I just tried sending myself a test message, and it seems to have gone out. I haven't received it back yet, but it may be taking time to get to and back from the place my domain is hosted.

[webbob.livejournal.com]

Either Panix's systems are misconfigured (probably a bad DNS record) or you've been the subject of DNS spoofing, in which case you probably just gave away your Panix password.

Probably the former, but this is another example of, "PKI isn't dead, it just smells that way." A "security" component that leads people to bypass it when it breaks, has no way of inhibiting such bypasses, and which is easy to misconfigure is not useful.

[redbird]

It now transpires that Panix has an extremely strict password algorithm: I used a song line as acronym and it was rejected because it "could be derived from the word 'fina'", for example.

I didn't particularly think it was DNS spoofing, but it was past time to change that password anyhow.

[redbird]

And here we go again. Same error. I'm just going to wait--the outgoing email wasn't exactly urgent.