Free/Busy with OL03 and toltec 2.0

[Henning Holtschneider]

On Thursday 11 August 2005 17:22, Joon Radley wrote:

> The free busy is done by Outlook itself. The root certificate is not
> installed and when the OL code fails to validate the server certificate it
> fails silently.

That's correct. But from my experience, a valid certificate chain does not 
necessarily result in Outlook downloading free/busy data over HTTPS 
correctly. We are using a certificate signed by our own CA and Outlook 2003 
still doesn't download the f/b information. The CA certificate is correctly 
installed and it works well for the secure POP connection. This may be a bug 
in Outlook?!

Actually, I never understood why the default setting on the Kolab server is to 
allow only authenticated and encrypted downloads of the free/busy 
information. Storing the username and the password URL-encoded in Outlook is 
cumbersome if you are using special characters or spaces in the password, and 
it is a potential security risk. If someone is *publishing* free/busy 
information for the whole organization to see, why does the transfer have to 
be encrypted and authenticated?

Enough rant :-)
Henning Holtschneider
--
LocaNet oHG - http://www.loca.net
Lindemannstrasse 81, D-44137 Dortmund
tel +49 231 91596-25, fax +49 231 91596-55
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.kolab.org/pipermail/users/attachments/20050811/e53cbb07/attachment.sig>