iPhone Mail SSL / TLS is ridiculous!

I found out today after large amount of digging at work that iPhone Mail.app is even more stupid than I originally thought. We first had issues with the fact that for listing folders it doesn’t support subscriptions, so the folder list shows our hundreds of shared folders. On a good IMAP client (even Mac Mail.app :-O) it will use LSUB instead of LIST to show only those folders which you are subscribed to. We marginally solved this issue by using a perl IMAP filtering proxy to filter out the LIST responses from the server to remove a large portion of the folder tree. This worked ok, but it doesn’t have any support for SSL.

So I set about hacking the perl to change the listening socket into an SSL socket… What I discovered shocked me. Usual IMAP clients have a security setting allowing you to choose none, SSL or TLS. The iPhone only has one which is labelled as “SSL”. So one would assume this means that you only have the option for SSL, right? No.

What it actually means is this:

if(ssl == on) {
    if(port == 993) {
        do_ssl_session
    } else {
        do_tls_session
    }
}

So, if you want to do IMAP/SSL then you HAVE to be connecting to port 993! How ridiculous is that! We needed to have our proxy running on a separate port so that we have normal IMAPS and support for our cut down mailbox filtered access. So literally, iPhone users are up a creek without a decent IMAP client…

Come on Apple, please make iPhone Mail.app better!

2 Comments »

  1. [...] under: computers — Tags: apple, friend, iPhone, phones — golan @ 15:56 My work mate Matthew Galloway has just found why Apple’s iPhone Mail Client sucks a bit. Interesting. Leave a [...]

    Pingback by Apple’s iPhone Mail Client sucks « Not Really a Blog — September 24, 2009 @ 4:56 pm

  2. I discovered the same issue. Why on earth would I want to host my external facing IMAP port on the default 993 address? OK it is no big deal to scan a public facing address for open ports but let’s not be making it any easier for the maliciously intended than just opening ports 443, 25, 993, etc…

    Poor form Apple.

    Comment by WolfWare — January 20, 2010 @ 1:21 pm

RSS feed for comments on this post.  | TrackBack URL

Leave a comment