On 06/04/2015 21:27, "...winston€«" wrote:
Roger Mills wrote:
I use Outlook as my main email client, and have lots of email accounts
set up within it - mainly those linked to my (PlusNet) internet account,
but also including one Gmail account. I have always - until now - been
able to send emails from my Gmail account. But I've just tried to send
one today, only to have it blocked by some nefarious guff about clients
like Outlook[1] not being secure!

WTF? Is that yet another step along the road towards Google's world
dominance, or does it have any merit?

They do seem to be offering the option to "allow less secure apps" - but
that comes with dire warnings!

Anyone one else encountered this - and what did you do?

[1] Other "insecure" apps include Thunderbird and mail apps on Apple
devices and Windows phones - but not any Google apps of course!

Gmail works fine here in Outlook 10 and Outlook 2013 using both IMAP and
POP3

IMAP
====
Incoming
imap.gmail.com using Port 993 and with SSL
Outgoing
smtp.gmail.com using Port 465 and with SSL



POP3
====
Incoming
pop.gmail.com using Port 995 SSL
Outgoing
smtp.gmail.com using Port 465 SSL or 587 TLS




Doesn't work with 2007 though, sadly.
--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

Roger Mills wrote:
On 06/04/2015 21:27, "...winston€«" wrote:
Roger Mills wrote:
I use Outlook as my main email client, and have lots of email accounts
set up within it - mainly those linked to my (PlusNet) internet account,
but also including one Gmail account. I have always - until now - been
able to send emails from my Gmail account. But I've just tried to send
one today, only to have it blocked by some nefarious guff about clients
like Outlook[1] not being secure!

WTF? Is that yet another step along the road towards Google's world
dominance, or does it have any merit?

They do seem to be offering the option to "allow less secure apps" - but
that comes with dire warnings!

Anyone one else encountered this - and what did you do?

[1] Other "insecure" apps include Thunderbird and mail apps on Apple
devices and Windows phones - but not any Google apps of course!

Gmail works fine here in Outlook 10 and Outlook 2013 using both IMAP and
POP3

IMAP
====
Incoming
imap.gmail.com using Port 993 and with SSL
Outgoing
smtp.gmail.com using Port 465 and with SSL



POP3
====
Incoming
pop.gmail.com using Port 995 SSL
Outgoing
smtp.gmail.com using Port 465 SSL or 587 TLS




Doesn't work with 2007 though, sadly.

Not enough info.
POP3 or IMAP ?
What are your settings ?
Port, SSL or TLS, Password form (e.g Cleartext), Authentication, etc.


Is Gmail web UI user settings configured properly to enable POP3 or IMAP
(i.e. correct mail protocol enabled) ?

I've a replacable drive for this laptop with Win7/OL07 - testing it
works fine using POP3. For IMAP, works too - though my settings for
IMAP are Port 993 with SSL and 587 with TLS

Fyi...I don't scan email incoming or outgoing. There are occasions that
if enabled current or in the past doing so can corrupt the email
account, registry data, or pst file.

--
....winston
msft mvp consumer apps

On 06/04/2015 22:31, Roger Mills wrote:
On 06/04/2015 21:27, "...winston€«" wrote:


Gmail works fine here in Outlook 10 and Outlook 2013 using both IMAP and
POP3

IMAP
====
Incoming
imap.gmail.com using Port 993 and with SSL
Outgoing
smtp.gmail.com using Port 465 and with SSL



POP3
====
Incoming
pop.gmail.com using Port 995 SSL
Outgoing
smtp.gmail.com using Port 465 SSL or 587 TLS




Doesn't work with 2007 though, sadly.

Anyway, as suggested by lots of people, I've now told it to permit less
secure apps - and I was instantly able to send and receive test messages
again.

So, looks like end of story - unless Google's dire warnings were genuine!
--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

| Not to mention that as soon as it gets sent anywhere every
| intermediate server can see the E-Mail, not just Google.

Those are two very different things. Someone
*could* see your email, just as they *could*
hear your phone calls. We already know the
NSA does that. But Google officially reading
your email and keeping their own copy is very
different from someone hacking the main
backbone servers. ....At least it is to me. If
you don't mind Google reading and co-owning
your email that's up to you... so long as you
don't send a gmail email to me and expect me
to answer.

On 06/04/15 14:01, wrote:
The Natural Philosopher wrote:
On 06/04/15 10:18, wrote:
Mayayana wrote:
| What happens if you use SSL on port 465?
|
|
| Slightly different error message (compared with using port 995) - but
| still no go!

465 and 995 are for outgoing and incoming
respectively. If you use both, with SSL, I don't
know of any more secure option, other than maybe
using secure password authentication.

Secure against what? E-Mail is insecure. Authenticating yourself
when reading/writing mail is all very well but doesn't prevent anyone
either impersonating you or intercepting your mail on its way to you
or from you.

however using ssh does make man in the middle attacks harder.

But unless you're using a text mode client such as mutt (which I do by
the way) then ssh doesn't come into it. You don't use ssh with
thunderbird, eudora or any of the GUI clients. (OK, you *could* be
using 'ssh -X' to run a GUI remotely but that's usually too slow to be
practical).

I meant that using the secure smtp protocol ..thats the standard these
days. Fully encrypted at least to the mail relay, and possibly beyond that.

I misremebered it its SSL, not SSH - sorry.


--
Everything you read in newspapers is absolutely true, except for the
rare story of which you happen to have first-hand knowledge. €“ Erwin Knoll

Roger Mills wrote:
On 06/04/2015 09:23, Adrian Caspersz wrote:
FWIW I've got an gmail IMAP/SMTP setup on Outlook 2010. Different
incoming port (993) but exactly same outgoing setup (587/TLS) as above.
Sending works fine.


Just tried changing 995 to 993 on my POP/SMTP setup to no avail.

993 is for IMAP not POP3

--
....winston
msft mvp consumer apps

The Natural Philosopher wrote:
On 06/04/15 14:01, wrote:
The Natural Philosopher wrote:
On 06/04/15 10:18, wrote:
Mayayana wrote:
| What happens if you use SSL on port 465?
|
|
| Slightly different error message (compared with using port 995) - but
| still no go!

465 and 995 are for outgoing and incoming
respectively. If you use both, with SSL, I don't
know of any more secure option, other than maybe
using secure password authentication.

Secure against what? E-Mail is insecure. Authenticating yourself
when reading/writing mail is all very well but doesn't prevent anyone
either impersonating you or intercepting your mail on its way to you
or from you.

however using ssh does make man in the middle attacks harder.

But unless you're using a text mode client such as mutt (which I do by
the way) then ssh doesn't come into it. You don't use ssh with
thunderbird, eudora or any of the GUI clients. (OK, you *could* be
using 'ssh -X' to run a GUI remotely but that's usually too slow to be
practical).

I meant that using the secure smtp protocol ..thats the standard these
days. Fully encrypted at least to the mail relay, and possibly beyond that.

I misremebered it its SSL, not SSH - sorry.

I did wonder if that's what you meant. :-)

Still only encrypts between you and your ISP though, what happens
beyond that on the way to the E-Mail's destination is anybody's guess
and is essentially insecure - or at least you should assume it is.

The only way you can ensure some sort of privacy is to encrypt the
mail itself using PGP or similar. Otherwise, I repeat, E-Mails are
neither secure nor private, regardless of SSL or whatever between you
and your ISP.

--
Chris Green
·

On 07/04/15 09:43, wrote:
The Natural Philosopher wrote:
On 06/04/15 14:01, wrote:
The Natural Philosopher wrote:
On 06/04/15 10:18, wrote:
Mayayana wrote:
| What happens if you use SSL on port 465?
|
|
| Slightly different error message (compared with using port 995) - but
| still no go!

465 and 995 are for outgoing and incoming
respectively. If you use both, with SSL, I don't
know of any more secure option, other than maybe
using secure password authentication.

Secure against what? E-Mail is insecure. Authenticating yourself
when reading/writing mail is all very well but doesn't prevent anyone
either impersonating you or intercepting your mail on its way to you
or from you.

however using ssh does make man in the middle attacks harder.

But unless you're using a text mode client such as mutt (which I do by
the way) then ssh doesn't come into it. You don't use ssh with
thunderbird, eudora or any of the GUI clients. (OK, you *could* be
using 'ssh -X' to run a GUI remotely but that's usually too slow to be
practical).

I meant that using the secure smtp protocol ..thats the standard these
days. Fully encrypted at least to the mail relay, and possibly beyond that.

I misremebered it its SSL, not SSH - sorry.

I did wonder if that's what you meant. :-)

Still only encrypts between you and your ISP though, what happens
beyond that on the way to the E-Mail's destination is anybody's guess
and is essentially insecure - or at least you should assume it is.

The only way you can ensure some sort of privacy is to encrypt the
mail itself using PGP or similar. Otherwise, I repeat, E-Mails are
neither secure nor private, regardless of SSL or whatever between you
and your ISP.

Correct. but at least it takes one very weak link - a packet sniffer on
your own wifi - out of the possible lines of attack...


--
Everything you read in newspapers is absolutely true, except for the
rare story of which you happen to have first-hand knowledge. €“ Erwin Knoll

The Natural Philosopher wrote:
I did wonder if that's what you meant. :-)

Still only encrypts between you and your ISP though, what happens
beyond that on the way to the E-Mail's destination is anybody's guess
and is essentially insecure - or at least you should assume it is.

The only way you can ensure some sort of privacy is to encrypt the
mail itself using PGP or similar. Otherwise, I repeat, E-Mails are
neither secure nor private, regardless of SSL or whatever between you
and your ISP.

Correct. but at least it takes one very weak link - a packet sniffer on
your own wifi - out of the possible lines of attack...

What WiFi? :-) The system I use to send mail is hard wired to the
router.

--
Chris Green
·