MailStore – “At least one archiving or export profile uses unencrypted connections or has the option “Accept all certificates” enabled.” when archive or export email
Summary
In MailStore, if you archive or export emails, the following warning occurs on the MailStore Dashboard: “At least one archiving or export profile uses unencrypted connections or has the option “Accept all certificates” enabled.”
This issue was reported in (but may not be limited to):
- MailStore Server
- MailStore SPE
Cause
After a long transition phase in which we only informed about potentially insecure outgoing connections, in MailStore 22.0 we now actively warn about insecure connections due to certificate errors or by ignoring such errors. The transmission of access data via potentially insecure connections due to untrusted certificates poses a significant risk, as e.g. so-called man-in-the-middle attacks are made possible with self-signed certificates.
Resolution
Use trustworthy certificates (Let’s Encrypt, external or internal certification authority) or accept the warning message and enable the connection.