SSL certifcate doesn't seem to be checked

[StR]

Thanks for implementing. Is there any idea when the fix will be available for the user and published via play store?

Just in case:
You can download and install that -dev version from the website.
When the next Play Store version comes out, you'd be able to update from there as it would be even if you hadn't installed -dev version..

[paulchen]

Thx, I have installed the dev version and tried to setup an account. I wondered, that still no certficate error is displayed in auto config mode.

Having a look into manual config mode shows that SSL strict is not used per default. Strict should be activated per default, otherwise the problem is still there: the user will not be informed about the wrong certificate, when using the default auto config mode...

[mikeone]

Thanks for implementing. Is there any idea when the fix will be available for the user and published via play store?

By the way: I've noticed that on my tablet there is a button when the manual configuration is finished where the user can view the SSL certificate of the server. On my smartphone this button is'nt available in aqua-mail... Is there any reason for this? Or is it maybe missing in the smartphone view/activity of the app?

@edit find attached two screenshots from tablet and smartphone

@Nadia, MobiSystems, AquaMail support

This questions are addressed to "the team which puts great effort in developing, testing and supporting the app."

Our team puts great effort in developing, testing and supporting the app.

[StR]

Having a look into manual config mode shows that SSL strict is not used per default. Strict should be activated per default, otherwise the problem is still there: the user will not be informed about the wrong certificate, when using the default auto config mode...

You are correct!
That's the way to minimize the necessity for "great support(ing)" of inexperienced users,  who instead are left with the sense of false security.
I have had hopes that Kostya would fix this part when he'd be implementing the more careful handling of SSL certificate problems, as he indicated.
Following the recent addition, I am not certain what is going to happen.

[Kostya Vasilyev]

Re: Having a look into manual config mode shows that SSL strict is not used per default.

SSL strict is the default - including for the email provider you listed in your forum profile.

Are you seeing "SSL relaxed" for a *new* account (as opposed to existing account where you might have changed the setting)? If you are, what's the @domain of your account?