Okay, a quick note:  I've done some tests here with Windows Live Mail and SSL NNTP connections, and we *can* use such a connection for NNTP.  However, there are a *lot* of gotchas involved with doing so, namely:

1) We'll still need to get a new cert on our end for news.elevatesoft.com, so right now you can only use www.elevatesoft.com for connections (it's the same server).

2) If you're using Windows 7, then you'll need to update your Windows 7 registry with the attached registry keys in order to enable TLS 1.1 and TLS 1.2.  We have to disable TLS 1.0 support on our end in order to be PCI-compliant.  After importing these keys, you'll need to restart your machine.  This also means that you probably won't be able to use Windows XP or lower to access the news server.

3) You will need to enable SSL connections for your NNTP client, and the client will need to connect to port 563 instead of port 119.

I'm probably still going to deprecate the NNTP newsgroup usage (IOW, not mention it on the web site anymore), but this will allow anyone that doesn't want to switch right now to stay with NNTP.

Tim Young
Elevate Software
www.elevatesoft.com

Tim Young [Elevate Software] <timothyjamesyoung@gmail.com> wrote:
>
> Okay, a quick note:  I've done some tests here with Windows Live Mail and
> SSL NNTP connections, and we *can* use such a connection for NNTP.
> However, there are a *lot* of gotchas involved with doing so, namely:
>
> 1) We'll still need to get a new cert on our end for
> news.elevatesoft.com, so right now you can only use www.elevatesoft.com
> for connections (it's the same server).
>
> 2) If you're using Windows 7, then you'll need to update your Windows 7
> registry with the attached registry keys in order to enable TLS 1.1 and
> TLS 1.2.  We have to disable TLS 1.0 support on our end in order to be
> PCI-compliant.  After importing these keys, you'll need to restart your
> machine.  This also means that you probably won't be able to use Windows
> XP or lower to access the news server.
>
> 3) You will need to enable SSL connections for your NNTP client, and the
> client will need to connect to port 563 instead of port 119.
>
> I'm probably still going to deprecate the NNTP newsgroup usage (IOW, not
> mention it on the web site anymore), but this will allow anyone that
> doesn't want to switch right now to stay with NNTP.
>

Thanks!

--
Matthew Jones

If this got posted, then SSL works fine on my iPhone. There is even an
option to not validate the certificate!

--
Matthew Jones

Tim


Also thanks - now to figure out how to implement that in my homebrew mail/news client

Roy Lambert

Hello,

Just want to let everyone know that it woks well with Thunderbird.

--
Fernando Dias

Matthew


It looks like Tim's gone for the same settings as Embarcadero (or should we be calling them Idera these days). That's made it easy for me to modify my antiquated D6 app

>There is even an
>option to not validate the certificate!

I don't understand this comment. Please explain

Roy

On 2/19/2016 12:57 PM, Tim Young [Elevate Software] wrote:
> Okay, a quick note:  I've done some tests here with Windows Live Mail and SSL NNTP connections, and we *can* use such a connection for NNTP.  However, there are a *lot* of gotchas involved with doing so, namely:
> 1) We'll still need to get a new cert on our end for news.elevatesoft.com, so right now you can only use www.elevatesoft.com for connections (it's the same server).
> I'm probably still going to deprecate the NNTP newsgroup usage (IOW, not mention it on the web site anymore), but this will allow anyone that doesn't want to switch right now to stay with NNTP.

Thanks Tim  - works well

Raul

NB! Thunderbird decided that "www.elevatesoft.com" server is different
than "news.elevatesoft.com" so decided to download all the headers again
- recent spike in activity was me downloading all the headers again. On
the plus side the news server passed the stress test very successfully

Raul


Glad you posted thet - I forgot to change news to www - done now


Roy Lambert

Malcolm wrote:

> Unhappy bunny here too.
> Just had a look at the web support forum .. for the first time.
> I don't want to write any more until I have had time to cool down.  

Actually not so unhappy now.
Simply changing news to www seems to allow me to continue using
XanaNews .. unless this post fails.

Raul,

<< NB! Thunderbird decided that "www.elevatesoft.com" server is different than "news.elevatesoft.com" so decided to download all the headers again - recent spike in activity was me downloading all the headers again. On the plus side the news server passed the stress test very successfully >>

Didn't even notice.  

Tim Young
Elevate Software
www.elevatesoft.com