|
| |
Forum Tips
» This forum is for users to discuss their software problems and suggestions for improvement.
Remember that only a tiny percentage of our users experience such problems (To be precise less than 0.7% have ever posted on this forum)
» Include your software version number (as displayed in the About Box)
» Check the FAQ before posting as most common questions have already been answered
» You don't need to also e-mail us separately as our support team will respond to all questions on this forum
|
|
| Author |
 Topic  |
|
|
pmorettini
USA
28 Posts |
Posted - Mar 08 2016 : 15:07:37
|
Hi,
I use MailListKing with Amazon SES. I got this email from them today--will this affect my ability to keep sending email via Amazon SES using MailListKing?
From: "Amazon Web Services, Inc." <no-reply-aws@amazon.com>
To: pm@pjmconsult.com
Subject: Amazon SES discontinues support of the SSLv3 protocol and of the
RC4 cipher suites [AWS Account: 901611303285]
Dear Amazon SES Customer,
As part of our continuing efforts to help you protect your data, Amazon SES will discontinue support of the Secure Sockets Layer 3.0 (SSLv3) protocol and the RC4 cipher suites for all connections to Amazon SES HTTPS and SMTP endpoints. Use of these protocols and ciphers are no longer consistent with industry encryption best practices. This update will start on April 5th, 2016 at 1 AM PDT and will impact the US-EAST-1, EU-WEST-1, and US-WEST-2 regions.
Most customers will see no impact from this change. However, we’ve identified some older SMTP clients that connect to Amazon SES SMTP endpoints through a TLS wrapper that relies on RC4 cipher suites or the SSLv3 protocol. These clients will FAIL to connect to Amazon SES SMTP endpoints after support of RC4 and SSLv3 is disabled.
You are receiving this email because our logs indicate that your client software might connect to Amazon SES SMTP endpoints through a TLS wrapper that uses RC4 or SSLv3.
To avoid interrupted access to Amazon SES, you must update any client software that connects to Amazon SES endpoints to use Transport Layer Security 1.0 (instead of SSLv3) as the minimum protocol version, and strong cryptographic ciphers instead of RC4 cipher suites. Details on how to do this are specific to your client software, so please refer to that software's documentation.
For more information on the RC4 and SSLv3 security recommendations, we suggest the following articles:
- https://www.us-cert.gov/ncas/alerts/TA14-290A (SSLv3)
- https://tools.ietf.org/html/rfc7568 (SSLv3)
- https://tools.ietf.org/html/rfc7465 (RC4)
If you have any questions, please don’t hesitate to contact us through the Amazon SES forum (https://forums.aws.amazon.com/forum.jspa?forumID=90 ).
Sincerely,
The Amazon SES Team
|
|
|
xequte
7504 Posts |
Posted - Mar 08 2016 : 20:44:44
|
Hi
By our understanding the latest version, v15.20, should work without issue. TLS can be enabled under File > Options, Sending Settings.
If also needed, RC4 can be disabled (in v15.20) by selecting File > Options, Database, Advanced Database Options, Extra Advanced Options and setting:
SSLCipher List
To:
ALL:!RC4
Nigel
Xequte Software
www.xequte.com
nigel@xequte.com
|
 |
|
|
seanb
31 Posts |
Posted - Mar 09 2016 : 08:43:58
|
We received the same message from amazon and are on v15.10R. Where can I download a registered version of V15.20?
I tried downloading from the MLK main page but received the message below.
Regards,
Sean Burke |
|
|
|
xequte
7504 Posts |
|
| |
Topic |
|
|
|
| |
Search
Amazon SES?
