Kmail certificate

[Alexander Dalloz]

Am Mi, den 24.08.2005 schrieb kevin.kempter at dataintellect.com um 20:35:

> > > > $ host pop3.dataintellect.com
> > > > pop3.dataintellect.com has address 207.155.252.97
> > > > pop3.dataintellect.com has address 207.155.248.14
> > > > pop3.dataintellect.com has address 207.155.248.31
> > > > pop3.dataintellect.com has address 207.155.248.122

> > The certificate is made for secure.cnchost.com (XO Communications, Inc.
> > Host Marketing). That of course does not match pop3.dataintellect.com
> > and the warning message by your MUA is absolutely valid.
> >
> > Alexander
> 
> dataintellect.com is hosted by XO. They host the web site and email for us. 
> does this matter?

<quote>
I continually see this message from Kmail:

The IP address of the host pop3.dataintellect.com does not match the one
the 
certificate was issued to
</quote>

Now think about that statement. Too test to which names the IPs resolve
pop3.dataintellect.com resolves with.
Use as mail server address "secure.cnchost.com" and no warning by your
mail client may appear any longer. If KMail checks for the IP too, then
complain at your hoster as they do bad things: forward resolution does
not match reverse!

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG http://pgp.mit.edu 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.11-1.35_FC2smp 
Serendipity 21:20:03 up 2 days, 18:03, load average: 0.12, 0.18, 0.14 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050824/ff6d42f6/attachment-0001.sig>