PDA

View Full Version : How About Offering Secure Webmail



jmcmillon
01-16-2006, 07:40 PM
From http://www.directadmin.com/forum/showthrea...?threadid=11530 (http://www.directadmin.com/forum/showthread.php?threadid=11530)


For your users who don't have SSL, the best way to do this depends on whether or not you've already got a domain name you use for shared SSL.

If you already have a Secure Site Certificate for shared access, for example, example.com, then you can just tell your clients to log in as follows:

https://www.example.com/squirrelmail

or

https://www.example.com/webmail

If you don't have a Certificate and account for share access then you should log into the control panel as admin, and click to reach your admin user control panel.

From there, if you don't have a site, set one up. If you don't have a suitable domain for a site that you and your resellers will be comfortable using, get one.

Then buy a Secure Site Certificate for that domain, and install it at your admin user level control panel.

Then, presuming the site you just set up and bought the certificate for was example.net, give your users this information:

https://www.example.net/squirrelmail

or

https://www.example.net/uebimiau

For your users without SSL, you'll have to tell them the domain to use for secure access instead of letting them use their own domain name, or else they'll get a name mismatch error.

And don't forget to make the necessary changes to the welcome email(s). And don't forget that final s in https.

Jeff


How about setting up a domain name with a shared access Secure Site Certificate as explained above to allow secure access to webmail? I realize it wouldn't help when users download their e-mail at home, but I would be willing to pay a small fee ($5 yr) for it...

Beats leasing an IP address and buying a certificate for every domain name...

Thanks for considering it!

Jason

Joe
01-16-2006, 08:18 PM
There's everyone's favorite name again (in that post from DA).

When things calm down with the Dovecot system, I will indeed consider, and likely offer secure webmail... right now, I just want the dust to settle. I'm kinda gunshy about pushing the limits of mail right now :) Soon young grasshopper, soon.