671961 - [config] add dreamhost.com (USA, hoster)

Status: ASSIGNED

(Webtools :: ISPDB Database Entries, defect)

Description

[Ben Bucksch (:BenB)]

It's in the top20 right now, and has mindshare of lots of techies :)

Setup seems straightforward:
http://wiki.dreamhost.com/index.php/Mozilla_Thunderbird

Username is email address.
IMAP and POP3 both support STARTTLS and normal SSL.

hostname is imap.<customerdomain>, which is a problem in combination with SSL. I'll have to find out how to solve that.

Comment 1

[Ben Bucksch (:BenB)]

Seems like the SSL cert problem is even more severe, as there are several email servers with different hostnames, and they don't even use a trusted CA.
http://wiki.dreamhost.com/index.php/Mozilla_Thunderbird#What_security_settings_should_I_use.3F

Comment 2

[Ben Bucksch (:BenB)]

I contacted their support/sales team, and they don't seem interested in changing anything at all in their infrastructure: neither setting up a frontend server, nor an autoconfig server nor fixing their certs.

:-(

Comment 3

[Ben Bucksch (:BenB)]

djkingpin.com is a random domain hosted by them.

djkingpin.com.          14396   IN      MX      0 mx2.balanced.homie.mail.dreamhost.com.
djkingpin.com.          14396   IN      MX      0 mx1.balanced.homie.mail.dreamhost.com.

Comment 4

[Ben Bucksch (:BenB)]

Attachment: Config, v1 - Use domain placeholder for hostname -> SSL certs broken

Given that they refuse to fix the broken cert problem, here's a config that would work, but trigger the cert alert. :-(

Comment 5

[Ben Bucksch (:BenB)]

Attachment: Config, v2 - Use domain placeholder for hostname -> SSL certs broken

ah, configs as text/xml is useful. there was a syntax error.

Comment 6

[Blake Winton (:bwinton) (:☕️)]

Comment on attachment 546357 [details]
Config, v2 - Use domain placeholder for hostname -> SSL certs broken

>    <incomingServer type="imap">
>      <hostname>mail.%EMAILDOMAIN%</hostname>
>      <port>993</port>
>      <socketType>SSL</socketType>
>      <authentication>password-encrypted</authentication>

Encrypted password even over ssl/starttls?

>    <incomingServer type="pop3">
>      <hostname>mail.%EMAILDOMAIN%</hostname>
>      <port>995</port>
>      <socketType>SSL</socketType>
>      <authentication>password-cleartext</authentication>

Cleartext password for pop3, but encrypted password for imap?

Those seem odd, but they don't block my r+.

Note: I haven't tested this to make sure the replacement works, so the second reviewer should do that.

Thanks,
Blake.

Comment 7

[Ben Bucksch (:BenB)]

Ah, this is why dreamhost.com isn't supported: Their SSL certs were broken.
Let's make a new attempt.

Comment 8

[Andrew Sutherland [:asuth] (he/him)]

Dreamhost has valid SSL certificates for IMAP and SMTP as of the end of June now.  Unfortunately, it's not a super-trivial mapping because dreamhost has a few clusters.  For example, asutherland.org is hosted at dreamhost.  The correct host for me to use for IMAP is sub4.mail.dreamhost.com, not just mail.dreamhost.com.  (However, if you lookup mail.asutherland.org, you get 208.97.132.231, and then if you do a reverse-lookup, you get sub4.mail.dreamhost.com, which is right.  mail.dreamhost.com resolves to 208.113.200.129 which reverses to sub5.mail.dreamhost.com.  My MX entries map to fltrin{1,2}.mail.dreamhost.com)

See
http://www.dreamhoststatus.com/2013/06/26/secure-certificate-changes-coming-for-smtp-on-all-mail-clusters-on-june-27th-230pm-pst/
http://www.dreamhoststatus.com/2013/05/09/secure-certificate-changes-coming-for-imap-and-pop-on-homiemail-sub4-and-homiemail-sub5-email-clusters-on-may-14th/

Comment 9

[Andrew Sutherland [:asuth] (he/him)]

Er, and I'm clearing checkin-needed because I do not believe we should land something encouraging people to use bad certificates when there are now good certificates available.

Comment 10

[Ben Bucksch (:BenB)]

agreed.

Comment 11

[echo4]

What is the status of this bug?