Re: [cobalt-users] Webmail and SSL, is it really this easy?

["Steve Werby" <steve-lists@xxxxxxxxxxxx>]

"Charles Teton" <info@xxxxxxxxxx> wrote:
> Thanks for your help so far with webmail... I'm try to make sure login is
> secure via my own ssl. After hunting through the RaQ archive, no luck, I
> found, via the great Google, at bit at NeoMail that said
>
> " All links within the NeoMail web pages are relative links, thus, if
> installed on an SSL-enabled webserver, such as apache-ssl, NeoMail won't
> take your clients out of SSL mode by specifying a link as http:// instead
of
> https://";
>
> So I tried logging on to openwebmail through:
>
> https://www.xxx.com/openwebmail/
>
> And it definitely looks like its secure... 'padlock' Is that really that
> easy... I kind of doubt it...

Yes, it's that easy to get it to run under SSL.  But that won't prevent
anyone from accessing it under HTTP.  If there's a configuration option in
Neomail to force logins via HTTPS set it, otherwise it'll require some code
modification to force HTTPS only logins.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/