Re: [BAWUG] Boingo and Email

[Julian Bond]

Matt Peterson <[EMAIL PROTECTED]> wrote:

SMTP AUTH is really the only solution for roaming users from
unknown/constantly changing remote IPs.  Surf and Sip provides the exact
same feature too <http://www.surfandsip.com/faq.htm> (we/I used qmail,
Boingo uses Exim {highfive to Terry}).

Nothing wrong with SMTP Auth. I approve of Boingo's use of it.

uh-huh... no SSL, so your Boingo ID+Password are sent in clear. That's
not good.

Don't blame Boingo, blame shitty as MUA's (like M$'s Entourage in MacOS
Classic).  MUA's are very anal about SSL certs, Entourage just chokes on
self-signed certs.

Hmmm? Well Outlook and OE support SMTPS and SMTP-STARTTLS. I believe Eudora, Netscape, Mozilla, Opera do as well. Yes they are anal about Certs, but even with a self signed cert it is possible to install your own signed CA cert. If you use an MUA that doesn't support SSL for SMTP you can always use stunnel.

In Boingo's case, and as a commercial organization, they could pay for a real SSL cert and it wouldn't be hard to configure their SMTP server to use it. Sending the Boingo ID+Password in clear over the WiFi link is just not very clever.

My todo list includes getting a signed cert for mail.surfandsip.net,
once I figure out the proper OpenSSL CLT commands to generate a cert
file that qmail-tls won't chroke on (paging Ben Laurie for a free drink).

After wrestling with OpenSSL, Postfix, Qpopper and Outlook+OE I sympathise. It is possible but there's an awful lot of parameters and sequences to get wrong.

Has anyone here used them in anger? Is this really true?

Huh?

I mean, has anyone used Boingo?

Incidentally, the software doesn't appear to like my Buffalo L11GP card.

If the Buffalo is Hermes (Orinogo/Agere) based, it should work in any
version of Windows.  I'm told Prism cards work with the ndis drivers in
Win XP; however I've never had a chance to use their sniffer.

The Buffalo is a Hermes chipset clone of the Lucent Gold. But like I said, the Boingo software doesn't like it. It works fine with Netstumbler. But it doesn't work with Aerosol. All under Win ME. There's some obscure references in the help file that say that Boingo use "Advanced features" of 802.11 and on install it offers to update your card drivers. But it then can't find drivers for that card.

BTW. People on this list frequently reply to sender as well as the list which I find mildly irritating. As long as it's easy, please don't reply to me as well. But don't sweat it.

--
Julian Bond Email&MSM: [EMAIL PROTECTED]
Webmaster: http://www.ecademy.com/
Personal WebLog: http://www.voidstar.com/
CV/Resume: http://www.voidstar.com/cv/
M: +44 (0)77 5907 2173 T: +44 (0)192 0412 433
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless