============================================================= EUDORA FOR WINDOWS, VERSION 5.2.1 -- RELEASE NOTES ============================================================= This document describes the changes in the software since Eudora 5.0.2. Separate sections have been given to changes from each release since then. NOTE: Several times we refer to to modify a setting. Copy the whole text including the < >'s and paste it into a new Eudora message. By pressing and holding down the key, you can click on a URL in a new message (a hand will display over the URL which means it can be used). ---------------------------------------------- CHANGES FROM 5.2 TO 5.2.1 ---------------------------------------------- Provided a work-around for the compatibility issue between Eudora and the CBC attack countermeasure in OpenSSL 0.9.6e and later. Eudora now prefers RC4 cipher suites over 3DES. Fixed bug that could cause Eudora to ignore the POP "Required STARTTLS"option when Norton Anti-Virus is scanning incoming email. Fixed bug that could cause Eudora to ignore the IMAP "Required STARTTLS" option. By default SMTP now follows the POP/IMAP setting for Kerberos 5. Users can switch back to the previous behavior (prefering the strongest authentication mechanism) by setting the SmtpAuthK5INI option to 0. Fixed a bug that would cause Eudora to crash if you disallowed all of the SMTP authentication mechanisms offered by the server. SMTP GSSAPI authentication now works in cases where the user does not explicitly specify an SMTP server name. Fixed problem where SSL connections to servers returning data in large chunks would time out. Fixed problem with IMAP and reading web pages emailed from Mozilla. "Strange" parts of multipart/alternatives now downloaded when using IMAP Fix for xxxx-retentive Cyrus IMAP servers that needlessly misparse nested multiparts; "be conservative in what you accept..." after all. Workaround for the EXTREME BROKENNESS of Lotus Domino IMAP bodystructures. Fixed a case where IMAP alerts were not being displayed. Address book filters are now no longer case sensitive. Added support for AUTH-RESP-CODE for POP3. Forwarding composition messages occasionally picked the wrong file if there was one with the same name in the attachments folder. Improved guarding against spoofed Attachment Converted: lines. Hitting in a preview pane when "Use Microsoft Viewer" is turned off caused "Cannot find ..." dialog to appear. ---------------------------------------------- CHANGES FROM 5.1.1 TO 5.2 ---------------------------------------------- NEW FEATURES ------------ Can now filter on "doesn't intersect nickname" and "intersects/doesn't intersect address book". Kerberos 5 support (see below). AUTHENTICATION AND ENCRYPTION ----------------------------- New in 5.2 is support for Kerberos 5. To turn it on for a given personality, open the personality's properties by right-clicking that personality and choosing "Properties". Go to the "Incoming Mail" tab, and choose the "Kerberos" radio button under "Authentication style". Fixed interaction problem that would cause the SSL negotiation to fail if both SSL and Kerberos were used in the same session and server name specified was a cname. Fixed problem that could cause Eudora to abort an SSL connection immediately after a successful handshake. The default TLS/SSL negotiation for standard port is now TLS 1.0 protocol with a TLS 1.0 client hello. The default negotiation for alternate port is TLS 1.0 protocol with a SSL 2.0 client hello. Upgraded internal SSL libraries. Fixed bug that might prevent sending a message if SMTP authentication is optional and the authentication attempt fails. Improved security for POP connections using SSL. Max password size is now 128 characters. IMAP ---- Added support for displaying IMAP alerts in the task error window. Support EMSAPI with IMAP accounts . GUARDING AGAINST EXPLOITS ------------------------- Added Windows Media Player file extensions (asf|asx|wax|wm|wvx) and mhtml to list of extensions that Eudora warns about before launching. Prevent trailing period attachment name exploit. Added checks to prevent spoofed Attachment Converted: exploits. When "Allow executables in HTML content" is off, we now prevent and other tags as well as when http-equiv=refresh. We now guard against exploits that rely on local file refs (using either fixed paths or relative paths). On by default and controlled by . We now guard against exploits that rely on executable embedded content. On by default and is controlled by . adds to the list of executable embedded content file extensions that will not be displayed. subtracts from the list of executable embedded content file extensions that will not be displayed. PASTING ------- Fixed bug where pasting over all text could lose style information like excerpt bars. Made "Paste As Quotation" smarter about excerpt levels. Fixed crash when choosing "Paste Special->Eudora Internal Format". Turned on support for Pasting as HTML . Sped up pasting of HTML. Fixed HTML format when copying so that pasting works better in certain cases. Improved pasting of HTML to strip script contents instead of displaying them. Fixed crash that could occur when pasting. SEARCH WINDOW ------------- Fixed behavior of Mailbox menu when search window is frontmost. Fixed other search window menu item enabling and behavior. Deleting messages in search window no longer incorrectly marks certain messages as read. Deleting messages in search window leaves messages in search results. EDITING AND VIEWING ------------------- Bullet shape now reflects indent level while editing. Bullet and indented items offsetting from surrounding text is now smarter. Fixed bug where a bullet line followed by two non-bullet lines would be saved and sent as a bullet line followed by one non-bullet line (line break was lost). Some other minor HTML formatting improvements. AUTO-COMPLETE ------------- Auto-Complete continues when spaces are typed. Auto-Complete completion now triggered by right arrow key. Auto-Complete is now smarter about finding entries with quotation marks. MISCELLANEOUS IMPROVEMENTS -------------------------- Now supports choosing connection each time Eudora initiates Dial-up networking when either entry is blank or is set (in which case the entry controls the initial selection). (Windows NT 4.0, 2000, & XP only) Added (default on) setting to make autocompletion prefer address book entries over history list. Extra logging of compaction, TOC changes, filter actions, and LMOS decisions. Now possible to change name with resource DLL. X-Sender header is now only included when return address doesn't match user data. Eudora now preserves multiple extensions when uniquely numbering attachments (e.g. file5.tar.gz rather than file.tar5.gz). Added X-Habeas to list of headers to hide. Reply to All now works for sent messages (i.e. to follow up on a message you sent). Allow unprintable low characters when using built in viewer or when editing. MISCELLANEOUS BUG FIXES ----------------------- Possible fix for conflict where McAfee virus scanning could cause Eudora to repeatedly fail to complete email downloading when the user receives an infected email message. Fixed bug where non-integral hour timezones west of GMT would print out bogus timezones. Fixed obscure HTML rendering bug when a quoted attribute value contains a CRLF. Fixed crash when ESP filter and user filter affected same message. Fixed bug where clicking on some links would cause an empty web browser window to open. Fixed bug where the "warn me when I queue a message bigger than" check could forget to use the latest text of the message when checking the size. Fixed bug where a changed "From:" personality could incorrectly revert to a previously chosen personality after queuing a message. Fixed bug where using "Special->Make Address Book Entry" could cause Eudora to hang when adding an entry that contained two or more spaces in a row. Fixed potential crash when compacting mailboxes with long pathnames. Fixed crash that could occur with invalid extra long MIME boundaries. Fixed Windows charset transliteration in headers. ---------------------------------------------- CHANGES FROM 5.1 TO 5.1.1 ---------------------------------------------- SENDING/CHECKING/FILTERING MAIL ------------------------------- Fixed bug where downloading a message with a really long Message-ID: or Date: header on a non-UIDL server could cause a crash. Fixed bug related to deleting of nicknames from the auto-complete list. Nested multipart/{alternative,related} boundary strings no longer contain prefix of outer multipart boundary string. Added support for the Euro symbol and other special characters. Incoming messages are now transliterated from ISO-8859-15 or UTF-8 to the default Windows character set as appropriate. New hidden INI setting, , which allows the user to force Eudora to send messages as US ASCII. Made Eudora more tolerant of other applications (i.e. virus scanners or backup utilities) interfering with Eudora's use of files in its spool directory. IMAP ---- Fixed bug in IMAP where if the desired part in a multipart/alternative was not the last part, then it would download the wrong part. New hidden INI setting, , which controls whether or not filters are run over IMAP accounts. ATTACHMENTS ----------- Fixed bug where attachments with long file names would get saved with an 8.3 name. MOODWATCH/SPELL CHECKING ------------------------ Fixed bug where spell checking a long word in the Subject: header could cause a crash. Fixed bug where if you set Eudora to spell check only when requested Eudora would only spell check the subject. Updated MoodWatch dictionary. SSL --- Password bases privateKey will now be used during client side authentication. The hidden INI settings and specify the file where the encrypted private key is stored. This key should correspond to the public key of the local cert that you are sending during client authentication. The hidden INI settings and correspond to the password which will be used to decrypt this private key. The privatekey file should always be in the base 64 encoded format. Changed the way in which the client cert directories were decided. Also, now it is no longer necessary to specify the name of the heirarchy file in the INI file. But if it is already specified in the INI file, then that will be used. MISCELLANEOUS ------------- Fixed a crash (by updating to zlib 1.1.4) that could occur when displaying an invalid PNG image. Fixed crash that could occur when displaying an invalid image. More robust file format checking for JPEG. Fixed bug that could cause problems with the Remote Instance dialog. User is now warned when clicking on a URL that refers to a local file. Fixed TT and strikeout edit button enabling problems when editing received messages. "Fw:" is now considered a subject prefix for forwards in addition to "Fwd:". Main thread in Eudora.log file is now marked by "MAIN" instead of thread ID. Updated help files. Changed tech support references in tips and Tech Support menu item to refer to proper web page. ---------------------------------------------- CHANGES IN 5.1 ---------------------------------------------- NOTE: Excessively long URL's can crash Eudora. This is in excess of about 2100 characters. MAJOR FIXES ----------- Fixed crash related to copying selected text. Fixed crash resulting from filtering a message that you had previously filtered and then undone. Fixed MFC crash caused by an idle IMAP session. Fixed a bug where you would crash after trying to copy some text. Fixed a bug where some messages would not be received because they contained a multipart/mixed MIME message where the first part is an empty text/plain section. Fixed crashing problem when a message contained an URL with a lot of percent symbols. Fixed crash when expanding a nickname that contained a lot of nicknames or email addresses. Fixed problem where Leave Mail On Server (LMOS) would get confused and re-download all of your mail after you have exited and restarted Eudora and then checked mail. Fixed crash that occurred when trying to File-Save As a message with Include Headers. Fixed BinHex attachment corruption problem that resulted from our mishandling filenames longer than 32 characters. Provided a workaround for people who encounter blank pages when printing multiple messages. You will have to use this setting: which defaults to 0 (milliseconds) in delay between printing messages. If you occasionally get blank pages when printing, then try changing this value to 3000. You might get blank pages because we shuffle through the print jobs too quickly. Fixed problem of losing hyperlinks that follow URL's in an unformatted message. COMPOSING/VIEWING MAIL ---------------------- Fixed crash related to URL display. Fixed bug where any open messages were closed when you shutdown and restart Eudora. Fixed crash when deleting a nickname from an alphabetized auto-completion dropdown list. Fixed bug where auto-URL's and hyperlinks were broken when they followed delimiters such as " and ( with no matching ending delimiter. We saw this bug when people were creating email newsletters with links that also quoted some text just before the links. Fixed bug where editing a queued message would not flag any of the words in the Subject: header. Fixed a bug related to clicking Never in the Return Receipt dialog. Fixed a bug related to 8-bit headers with character sets of windows-* (i.e. "windows-1250"). We assume that your system has the appropriate font installed. Added "Automatically download HTML graphics" checkbox to Tools->Options->Display. This controls whether or not Paige windows download HTTP images while viewing. An example is background fetching of inline images that are part of a web page that was sent to you. Note that you will get an ugly blue box as a place holder while the image is being downloaded. You can disable immediate downloading of the inline images by using which is the same as the option mentioned above. The default is 1 (enabled). Fixed bug where copying an image from your browser would get pasted as an attachment into a new message. It now gets pasted as an inline image. We now have limited table support when composing a message. You will have to add ImportTables=1 to your Eudora.ini file or click on . Added "Don't auto-complete, just list matches" in Tools->Options->Auto-completion. This setting will show the dropdown list of matching words, but it will not auto-complete the field in which you are typing. The default is disabled. You can also modify this setting with the following URL: . Pressing the Escape key when Eudora provides the auto-completion dropdown list will cause the list to disappear during the length of typing in that email address. A subsequent typing of an email address should re-engage the auto-completion list. Fixed bug where WordWrapOnScreen=1 would cause MoodWatch flagging and inline signatures to fail. Auto-completion is no longer case sensitive for foreign characters (ASCII 192-223 -> 224-255). If you type an uppercase version of an accented character that had previously been entered in lowercase, then auto-completion will still find a match. Redirecting a message now behaves differently than Reply or Forward when dealing with selected text. With redirect, it will always redirect the entire message. With Reply and Forward, only the selected text will be quoted. Tooltip for link button to the right of bullet list in a composition window has been changed to "Make hyperlink" to be more consistent with Text-Make Hyperlink. When making a hyperlink, the http:// is no longer selected as a default so that you do not have to press the end or right-arrow keys before starting to type. We have added a new Last Text Color button in a composition window. This button will match the color that you last selected to format your text. It will not revert to the Automatic (default) color if that was selected. The button is located to the right of the Color selection button. Note that the Last Text Color button remembers its value between sessions. The Last Text Color button will not change colors if you hold down the key while selecting a color from the color menu. This is useful when you are when you are making a one-time color change where you do not want to affect your commonly used text color. Fixed bug where auto-completion would stop if it encountered a period. Fixed bug where underlined text following a bullet list would cause the underlining to be printed with dots and dashes. Fixed bugs related to bullet lists such as shrinking their size and vertically centering them. We also fixed bug where the bullets would become hollow. Fixed bug where the bullets in a bullet list would be placed outside of an excerpt bar. We added a new style button called Strikeout where the formatting is that it will cross out the text with a horizontal line. Changes to the Last Text Color toolbar button: - The button has been combined with the Color selection button. The last text color is indicated by a small rectangle below the palette. - You can select a color by clicking on the down arrow on the right side of the button. - It is now available in the Signatures window, File-New File, File-Open File, and editing incoming messages. Fixed crash when deleting a new nickname from the Autocomplete list. MOODWATCH/SPELL CHECKING ------------------------ MoodWatch has been changed to default to not count safe capitalized words and ignore HTML. Spell checking and MoodWatch should now flag words in the headers such as Subject: MoodWatch should ignore HTML tags. MoodWatch and Spell checking should work together now. Fixed bug where a misspelled word would not get unmarked after correcting it. Fixed bug where spell-checking on send/queue would not check the Subject: field. Fixed bug in MoodWatch where it would assign random MoodWatch statuses for .msg messages via the command-line interface. When you right-click on a misspelled word in the Subject field, you will get a list of 5 suggested words from which can choose one or you can add the misspelled word to the dictionary. Fix to drawing of MoodWatch and spelling underlines. Fixed most of the problems with flagging of words for spelling and MoodWatch. Windows 95/98/ME users should now see the bitmaps under the flagged text. Fixed problem where parts of the URL would not be linked because some of its text was flagged as misspelled. If you have selected text in either the Subject or text body, then selecting Edit-Check Spelling (or using ctrl-6) will only check the selected text. If you do not have any text selected, then it will check all of the text (Subject and text body). Fixed problem where red underlines from misspellings remained in the Subject if words were removed. Fixed problem of no spell checking on last word in Subject Fixed most of the problems with drawing the underlines that flag for misspelled words and MoodWatch text. We reduced the flickering when drawing words flagged by MoodWatch. MoodWatch will not mark the bad mood words if the overall score does not show any chilies. Fixed a crash related to MoodWatch and spell checking. We have changed the MoodWatch underline to a maroon chili to help distinguish it from misspelled words. Fixed redraw problem with spell checking when pasting some text into the Subject: header and then Edit-Undo. Fixed bug where some words are not flagged because of a conflict between MoodWatch and automatic spell checking. Changed the way that we send/queue messages that are flagged by MoodWatch. In previous betas, we would queue a flagged message and wait a little while before sending it. People complained that it was difficult to send the flagged messages, so now we only have the MoodWatch warning dialog upon queuing/sending the message. If the user clicks [Send Anyways] then it is queued/sent as opposed to being time-queued to be sent after 10 minutes. You can enable this previous behavior in Tools-Options-MoodWatch-Delay when queuing/sending. Note: If you have a time-queued message, you can send it right away by right-clicking on the message in the Out mailbox and selecting Change Queuing... and selecting Right Now. Fixed bug where Edit-Check spelling was not available when editing a signature or using File-New. Fixed problem where inline images would disappear when MoodWatch was triggered. ATTACHMENTS ----------- Drag and drop of attachments from received messages is now supported. You do not necessarily have to have the attachment selected before you can drag it. To further support this feature, we have added a couple of extra settings: (default 100 millisecs) this controls the delay at which point the mailbox window would scroll. (default 1000 millisecs) this controls how soon your mailbox folder would open when dragging your mouse cursor over it in the mailbox window. (default 1) this controls whether or not we allow drag and drop of your attachments. Fixed bug where we could not display an attachment icon which resulted in an error message. Now we would not display the icon if it is not available. Fixed confusion where Help-Insert System Configuration would not show that the attachments will be Text in Body. Fixed the Attach File dialog such that it now has an Attach button. Fixed bug where you should not be allowed to enter a period in the Attachment: field. Fixed bug where right-clicking on an attachment inside of a received message and selecting one of the Attachment actions would not perform the action for some users. If you first select an attachment, we now support the ability to drag and drop the attachment to your desktop or another folder. Receive MIME Digest as mailbox attachment has been added (default off). This option can be found in Tools-Options-Attachments- Receive MIME digests as mailbox attachment. This corresponds to where 0 is off (default) and 1 is on (we save the digest to attach directory as an .mbx file) Importing of MIME digests get placed into a mailbox. This clarifies how we handle importing of MIME digests. We still can receive MIME digests with Tools-Options-Attachments-Receive MIME digests as mail box attachments. We added support to automatically remove incoming VCard (.vcf) files by using . The default is 0. This should work for both POP and IMAP. STATIONERY/SIGNATURES --------------------- In some cases, the stationery tabbed window would not display any newly created stationery until you exited and restarted Eudora. Eudora now displays them. Fixed problem where the key would not delete a signature in the Signatures window. Fixed bug where attempting to create a signature whose name already exists would bring up the original signature. It now requires an unique signature name. Fixed odd behavior when you tried to File-Exit while editing a stationery. SENDING/CHECKING/FILTERING MAIL ------------------------------- We now send out a CAPA command in order to support SSL. Unfortunately, some servers have problems when they encounter the CAPA command. If this is true for you, you will need to go to that personality's properties and change the SSL (Secure Sockets) option to "Never". Outgoing message with associated speak filter will now state the To: field's value instead of the From: field. Fixed bug where users with a login name that contains an @ sign (i.e. "user@alternatedomain") did not get the correct login name when doing SMTP authentication. The problem was that the code was looking for the first @ sign rather than the last in an account name like this: "user@alternatedomain@realdomain". Fixed formatting for From envelope header when dealing with MIME digests. This would have caused oddness if an user made a MIME digest during a time when the hour, minute, or second was less than 10, then moved this mailbox over to Macintosh. Fixed bug where Eudora was not handling the Content-Location: header. FIND TEXT/MESSAGES ------------------ Fixed problem with Find Text when there were NULL characters in the mailbox. Fixed bug where transferring a message from the "Find Messages" dialog to a new mailbox would give repeated prompts. Find Text now works in the Address book. Note that it also wraps around to the top of the list after it is at the bottom. Selected found messages in Find Messages Results tab will remain selected even after clicking on another dialog. Find Messages results now supports Transfer, Reply, Reply to All, Forward, and Redirect. Delete has been moved to the bottom of the list of options. Fixed bug in the Find Messages results tab when you right-click and select "Open mailbox". The selected message would be selected as well as the last message in the mailbox which is unexpected. Fixed bug where transferring messages from the results tab of Find Messages to a mailbox within a folder would fail. We also addressed the case where you try to create a new mailbox in this process. MAILBOXES --------- Fixed a crash when emptying your trash of certain messages. A message that does not have any text body will have a message size of null (O with a diagonal stroke through it) in the mailbox table of contents view. Fixed problem where failure to rename temporary .mbx file while compacting would cause out-of-phase .mbx and .toc. If you select a group of messages in a mailbox, then right-clicking and selecting Change Personality will show a dot next to the personality with which all of the messages are associated (important when replying to these messages). If there are a mixture of personalities, then no dot is displayed. If you double-click on a .mbx file in File Explorer and it is now associated with Eudora, then it will run Eudora and open that mailbox. This build fixes a problem where long mailbox names were not being displayed properly. Fixed bug where the Label would be lost when transferring a message to the Out mailbox. Improved system performance when mailboxes are stored on a remote drive. You will need to use the option: which will use the temporary directory on the machine as a spot for incoming and outgoing spool files. Fixed bug where the wrong message would be selected in a newly opened mailbox if the Date column is sorted in ascending order (shift-click the column header). ADDRESS BOOK/DIRECTORY SERVICES ------------------------------- When opening the Directory Services, the focus will now be in the Query field even if the window was already open. We felt that is the field that you would most want the focus. If you have selected some text, then holding down the key while opening the Directory Services window will now automatically fill the Query field with the selected text. The address book no longer automatically expands the nickname if you click on the To:, Cc:, or Bcc: buttons. Its behavior now corresponds to the status of "Automatically Expand Nicknames" in Tools-Options-Miscellaneous. If this setting is enabled, then no only will nicknames be automatically expanded when you type them, but also when you select the nickname in the address book and select To:, Cc:, or Bcc:. Fixed problem where address book fields would seem like they are merged. Fixed bug in the address book where the Rename was inappropriately available in the left pane when you are using a different view. Fixed bug with the recipient list where Special-Remove Recipient would state that there are no more recipients yet it also lists a newly added recipient. Fixed bug where the value of would not get appended to the end of all of your Ph queries. An example value is "return all" which would allow you to see all of the information for the Ph record. IMAP ---- Fixed a crash related to creating IMAP mailboxes. We clarified the dialog when forwarding/redirecting an IMAP message and warn the user if the attachment has not been downloaded yet. We now support Hesiod for IMAP. IMPORTING --------- We now import Netscape 6 mail. We cannot import if you installed in a non-default directory. We are expecting the Netscape data in \Mozilla\Users50\xxxxxxx. You can use Advanced Import to migrate. SSL --- SSL is implemented on a per personality basis. In your Personalities window, right-click on a personality that supports SSL. Under Generic Properties tab, there is a Secure Sockets section where you can specify its usage. The list includes: Never, If Available, Required on Alternate Port, and Required (STARTTLS). The default is "If Available". The [Last SSL Info] button will only work if you have been able to send an email with the SSL personality. Under Incoming Mail tab, there is also a Secure Sockets section with the same options. You can click on the [Last SSL Info] button to view the Eudora SSL Connection Information Manager. Note that there is a [Certificate Information Manager] button at the bottom of the dialog. In the Certificate Information Manager, you can specify which certificates you trust. You can click on the [Add to Trusted] and [Remove from Trusted] buttons to specify which certificates you trust. Eudora has provided some Trusted Certificates, but you will have your own certificates too under Server Certificates. A skull with cross bones represents a certificate that is not trusted. A yellow face in the User Trusted Certificates branch will mean that the certificate is trusted. If a certificate has expired, then you will see a red backwards L over the icon. Some SSL-specific information: POPSSLAllowVersion2 and SMTPSSLAllowVersion2 default to true (1). NOTE: These have been changed to SSLReceiveAllowVersion2 and SSLSendAllowVersion2. These settings will reject a successful SSL negotiation if the server and the client negotiate version 2.0 of SSL. Our implementation of SSL should correctly handle the situation where the server suddenly closes the socket connection during a SSL negotiation. SSL should not get locked if you are using more than one SSL connection. If using "Required", then the connection should fail if the server does not support SSL. SSL host mismatch errors should be reported in the Task Errors window. Regular Expressions should be supported for SSL when matching hostnames in certs with the connected server name. We have added SSL Alternate port support for password change. INI Settings:(per personality) SSLPasswordUse(0) - same meaning as SSLReceiveUse setting SSLPasswordAlternatePort(106) The remaining SSL settings will be same as the equivalent POP/IMAP SSL settings for that personality. You could set these values even if you are not using SSL on POP/IMAP with that personality. If STARTTLS gives an error in SMTP then it can be ignored and not displayed in the task bar in the "If Available" case because Eudora will be sending mail using the non-SSL means in this situation. This should fix some complaints about SSL failures with the following error: SSL error status: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number Some servers have problems when we don't try negotiating SSL 3.0. So now we will try negotiating 3.0 first, but the user is free to change this using the SSLSendVersion/SSLReceiveVersion INI setting. Fix for SSL/IMAP - Failing to send FETCH 1 command Using different networkbuffer size for IMAP/SSL The problem is that if we don't supply this sized buffer, then SSLPlus library gives incorrect values of read data byte number. (It is less that what it actually reads) Changed the default IMAP port for alternate port SSL to 993. If you double-click on a SSL Certificate in the Certificate Information Manager, then it should now provide some information. We have improved our logic for handling expired SSL certificates. New PKCS#7 certficate databases that we could ship with Eudora. Here are the 12: * VeriSign/RSA Secure Server CA * VeriSign Class 1 Public Primary Certification Authority * VeriSign Class 2 Public Primary Certification Authority * VeriSign Class 3 Public Primary Certification Authority * VeriSign Class 1 Public Primary Certification Authority - G2 * VeriSign Class 2 Public Primary Certification Authority - G2 * VeriSign Class 3 Public Primary Certification Authority - G2 * VeriSign Class 4 Public Primary Certification Authority - G2 * VeriSign Class 1 Public Primary Certification Authority - G3 * VeriSign Class 2 Public Primary Certification Authority - G3 * VeriSign Class 3 Public Primary Certification Authority - G3 * VeriSign Class 4 Public Primary Certification Authority - G3 (The "G2" stands for "second generation"). (The "G3" stands for "second generation" and is a 2048-bit CA.) Fixed some other SSL issues: 1)Middle man attack for SMTP - previous ehlo and sasl objects are now getting reset 2)aborting connection on SSL failure - not depending on user or server. 3)Minor Modifications in certificate overrides. 4)Bugfix in the function to duplicate cert 5)Removed some warnings in qcssl.dll Added Thawte certs for SSL. Fixed the inability to see connection parameters if your dominant personality was using IMAP and SSL. Improved the UI for SSL in the personalities window as well as Tools-Options-Checking Mail and Sending Mail. SSL can be further configured using the following settings: SSL Encryption algorithm (minimum acceptable key lengths): Key exchange algorithm (minimum acceptable key lengths): Enable (1) (default) or disable (0) regular expressions in the matching of host names and the server name in the server certificate. You need to specify this on a per personality basis. We now extract and display the length of the public key used for the key exchange algorithm from the server cert. Fixed problem where a SSL warning would be cut off. SSL now supports a "Rejected" state for a SSL connection. This status occurs when the connection was successfully negotiated, but there is a configuration setting that forces the connection to be dropped. SSL now supports exporting of certificates in the Certificate Information Manager. It supports DER Encoded Binary X.509 (*.cer, *.crt), Base 64 encoded X.509 (*.cer), and Cryptographic Message Syntax Standard-PKCS. Added support for Certificate Import functionality for DER encoded X.509 certs. New root certificates for SSL have been added: Certicom A and Certicom B. Added functionality to calculate hash of SSL certificate. Fixed bug in extracting/displaying the serial number of the SSL certificate. We now calculate the thumbprint of the SSL certificate using SHA/MD2/MD4/MD5. The user can select any of these algorithms and observe the corresponding thumbprint that is calculated. Note that SHA is the default. Fixed bug where Eudora cannot use certain SSL servers that extract domain names from certs with weird OID's. Fixed bug where a bunch of .tmp files were being left behind when you view certificate details. MISCELLANEOUS ------------- Better handling of multipart/related inside of multipart/alternative. Will now prefer multipart/related over text/{plain,enriched,html}. Removed obsolete "Switch views for Find" setting in Tools->Options->Extra Warnings. Added , which controls how many background dialup connections that Eudora can start at the same time. The default value is 2. Addressed issues with CMU's Cyrus ACAP server: - Fixed CRAM-MD5 authentication problem of accepting ACAP literals - It now parses literal strings and quoted strings as entry values - removed truncation on a value with a space - query is now lowercase to allow some servers like Cyrus to understand us - fixed some case-sensitive string comparisons that would cause failed operations. Fixed problem where some older Win 95 systems (OSR1 and earlier) would give errors when trying to change any Eudora file (i.e. mailboxes). Changed the toolbar icon for File-Send Immediately to distinguish it from Message-Send Immediately. Fixed bug where we required the Eudora folder to be writable. It now only checks for the existence of the Eudora folder. Fixed crash caused by some servers that say okay to SSL then don't allow it. ---------------------------------------------- CHANGES INCLUDED FROM 5.0 TO BEFORE 5.1 ---------------------------------------------- COMPOSING/VIEWING MAIL ====================== Fixed conflict where changing the Message Font in Eudora would also change the font in Internet Explorer. You need to use this URL to set it to 1 to resolve this conflict. As a default, it is 0 because we need to be careful about unknown side effects. There is a known problem where printing email messages will still be printed using the browser's font size. Fixed freeze when clicking on a URL. This related to our using DDE to check to see if Netscape is running. If you use Netscape, then previous to this fix clicking on a URL in Eudora would have reused an existing Netscape browser window. After the fix, clicking on a URL in Eudora will open a new Netscape browser window. If you are using Netscape as your browser and would like clicking on URL's in Eudora to reuse an existing browser window, then use this URL: . Fixed crash when auto-completion was not using the address book for its list. Fixed sudden cascading repainting problem when switching from having a vertical scrollbar and not having one. This was common in the composition window. Canceling a forward/redirect that had added Insert System Configuration files will no longer lose attachments. Fixed situation where URL's would get an orange highlight if another style is present in the inline signature. Fix for Guninski security hole where launching a file that uses a previously sent rogue DLL would have unexpected results. Caret displays in the correct field after a mailto. We no longer scroll two lines at the bottom of the message. Hyperlinks are no longer broken by a spelling error. Fixed a bug where sending out plain text with a large word on a line in an excerpt caused the wrapping to occur at the space after it. The bad result would be extra spaces in front of the > for excerpts. Tab in body now works when using Help-Report a bug. allows for the user to have a normal paste use HTML format. The current default is off, but this might change in the future. Fixed a bug where deleting an open message from the preview pane would cause Eudora to crash. Fixed a couple of bugs in displaying messages that contain URLs where www or ftp is preceded by other alphanumeric characters. The message could take a long time to display, and Eudora would hang if the URL was invalid. Fixed a crash in composition windows containing hyperlinks. Fixed a bug that could cause the caret (blinking cursor) to appear in the wrong window after a new composition window was opened. Fixed a bug where editing a queued message that you had previously set to be sent at a certain would cause the message to instead be sent on the next send-messages operation. Fixed a bug where copying HTML (e.g., from a browser) to the clipboard and then pasting it into Eudora would introduce strange characters and other problems. This fix applies only if you Edit/Paste Special in Eudora and then choose HTML Format in the dialog that comes up. Fixed a bug where Eudora would crash when previewing a text/enriched message that contained a font change. Fixed a bug where, if Eudora was not the default mailer, clicking on a mailto: link in Netscape would still open a composition window in Eudora. Fixed a bug where clicking on Reply To, Reply All, or Forward in the Netscape Messenger news reader would open a composition window in Eudora. Eudora now makes itself the handler for mailto: links in Netscape if any of the following conditions holds: - The registry entry for mailto (HKEY_CLASSES_ROOT\mailto\shell\open\command) points to Eudora. - The user answers Yes to the warning that pops up if Eudora is not configured as the default mailer. - If the settings DefaultMailto=1 and WarnDefaultMailto=0 are both present. By default, DefaultMailto is 0, meaning Eudora doesn't automatically make itself the default mailer, and WarnDefaultMailto is 1, meaning Eudora puts up the aforementioned warning if it's not the default mailer when it's launched. Added .shb and .shs to the list of attachment extensions that cause a warning upon opening the attachment. Nickname expansion is now done in the Cc: and Bcc: headers as well as the To: header. Fixed a bug where inserting a horizontal line in a message could cause the line to be drawn through a line of text. Fixed a bug where a new reply or forward window would sometimes scroll all the way to the end of the message. Added Print One to the File menu. This prints one copy of the current document to the default printer without displaying the standard print dialog. Fixed a bug where excerpt bars didn't appear correctly in Microsoft Outlook and Outlook Express in messages sent from Eudora. Added more descriptive operating system versions in the text generated by Help/Insert System Configuration. It also now correctly identifies the more recent levels of Intel CPUs. Fixed a bug in Auto-completion name deletion. Print Preview is now supported for the Microsoft viewer if Internet Explorer 5.5 or above is installed. Also, Print Preview is now enabled when the focus is in a mailbox summary and one message is selected. Fixed a bug where font changes made in Tools/Options/Fonts weren't taking effect if Tools/Options/Viewing Mail/Use Microsoft's Viewer was checked and Internet Explorer 5.5 was installed. Removed Winsock information from the Help/Insert System Configuration text, and added the mode (Paid, Sponsored, or Light). Now putting the version number and current mode in the Subject header of Help/Report A Bug messages. Fixed a bug in the way messages were encoded if BinHex encoding was selected. The Tools/Options dialog has a new panel for Composing Mail. Some settings were moved to this panel from the Sending Mail panel. Fixed problem where Help-Insert System Configuration would fail because it could not find your Attach directory. MOODWATCH ========= Fixed a crash in MoodWatch when queuing/sending a message while the user has WordWrapOnScreen enabled. Moodwatch column no longer displays if this feature is disabled in Tools-Options-Mailboxes-MoodWatch. Improvements with background MoodWatch which occurs when you open a mailbox that has not been MoodWatch'ed yet. Still more refinement as to which words and phrases do and don't trigger MoodWatch chilies. STATIONERY/SIGNATURES ===================== A horizontal bar has been added between your text body and your in-line signature. Note that it will not be present in the received message. This will help distinguish from the body of the message and the inline signature. Note that if you modify/add text below the horizontal line, then it assumes that you are modifying the signature. As a result, if you change signatures, then the modified text will be lost. Stationery files no longer have a limitation of 63488 bytes. Fixed a bug where signatures were losing their styles when viewed inline. Inserting an image in a signature or stationery is disallowed for now, since it wasn't working right and could cause a crash. Fixed a bug where dynamic menus, such as the stationery menu, failed to wrap. For example, if you had a whole lot of stationery, you wouldn't be able to see all of it in the menu. Fixed a bug where any message containing a signature was treated as if it had styled text. SENDING/CHECKING/FILTERING MAIL =============================== Fixed incorrect mail being printed from the mailbox TOC while the preview pane is hidden. We now have a new INI setting for controlling filtering of incoming messages in POP and IMAP. This can be specified per personality. The setting is FilterIncomingMail. Here are your options that you set for each personality (you have to manually edit your Eudora.ini file): FilterIncomingMail=0 --> no filtering at all (server side or other) FilterIncomingMail=1 --> Complete filtering turned on (default) FilterIncomingMail=2 --> Advanced filtering, IMAP server side only. Manual filtering will still be allowed regardless of the setting. Fixed a bug that could cause Eudora to crash while downloading a message from a POP server. Fixed a crash in the Filters window. Fixed a bug that was preventing Eudora from recognizing that a POP server has the MANGLE capability. (This allows the server to return a more useful summary of the message's content, including attachments, in cases where the message isn't downloaded in its entirety.) To fix the problem you need to use this URL: QUALCOMM's Qpopper 3 is an example of a POP server with MANGLE capability. Fixed a memory leak upon sending a message. Turbo Redirect no longer works in filters. Formerly, it caused crashes. Fixed a bug where the Filter Report window would lose its column headers and mess up the data if it got new reports in to it without first being viewed. Fixed a couple of bugs in the handling of .msg files specified on the Eudora command line. No message was being sent if the path of the .msg file contained any spaces, even it was enclosed in quotes. Also, a signature is now included only if the .msg file contains an X-Eudora-signature header. FIND TEXT/MESSAGES ================== Fixed crash in Find Messages when it encountered a message without any headers. Find Text has been enabled for Filters. Use ctrl-shift-f to initiate the Find Text dialog while the focus is in the list of the filters in the left pane of the Filters window. Notes on Find Text for Filters: - It starts its search after the filter in focus. - The search will wrap around the end of the list and continue from the top of the list. Find Text now supported for File-New and Signature windows. The focus must be in the window that you are searching. Fixed a bug where Find Messages and Find Text were disabled when the focus was in the message preview pane. Fixed a bug where Find Messages would show the wrong results when searching by message priority. MAILBOXES ========= Mailbox TOC status icons are now transparent. When prompted to rebuild a mailbox, we place a stronger emphasis on rebuilding the TOC index file. Data in the Size column of a mailbox summary is now right-justified. ADDRESS BOOK/DIRECTORY SERVICES =============================== Fixed crash with the Address Book when removing a recipient. Fixed "swap" button problem with "Make Address Book Entry..." where it would reset the email address field every time you clicked on "swap". Fixed the inability to change the email address when using Special-Make Address Book Entry... (ctrl-k) In the Address book, selecting some email addresses and Make Address Book Entry will now retain the Full name field. Fixed some UI issues with the Address Book. Address book can be exported to CSV. UI improvements for Directory Services. Fixed a crash that could occur upon removing an address from the recipient list with the address book loaded. Removed obsolete LDAP servers from the Directory Services defaults, and changed the default Ph server to ns.eudora.com (which might not be available for a few days). STATISTICS ========== Sent attachments are now counted in Statistics despite WarnQueueBigMessage=0. IMAP ==== Fixed the inability to select an IMAP folder in Filter's Transfer to action. The problem occurred if the IMAP folder contained any mailboxes. Note that the "This Mailbox" selection will only be available if you can transfer mail to the mailbox/folder. Fixed problem where IMAP embedded images would get lost if transferred to a local mailbox or viceversa. IMAP mailboxes can now be sorted by server status. You can now make a toolbar button for transferring messages to an IMAP mailbox. Fixed problem with IMAP transferring into the same mailbox would cause it to be marked for deletion without keeping a copy. Fixed a bug where dragging a message with an attachment from a POP mailbox to an IMAP mailbox would lose the attachment if the attachment directory was no longer the default one. Fixed a bug where users of some IMAP servers could not download any messages because the server sent null characters in response to certain IMAP commands. Fixed a bug where copying a message from the Out mailbox to an IMAP mailbox would change the time of the message. Fixed a bug where FCC'd messages in IMAP mailboxes showed incorrect times. The Delete option is now grayed out for IMAP email that's already marked for removal. Directory names containing commas will now show up in IMAP. Fixed a bug in the IMAP internal message cache. Worked around for a non-standard attachment-related behavior exhibited by certain IMAP servers. A Resynchronize method was added to the IEuFolder Automation interface. This method will resynchronize any given IMAP folder. IMPORTING ========= Fixed importing WAB and MAPI address books which used expand to addresses. Improvements to OE5 dbx file importing. Importing from Outlook Express WAB shows the first names now. Fixed a bug that caused some Outlook 2000 address books to not be imported into Eudora. Added support for importing from multiple Outlook Express identities. Fixed a bug with importing some Outlook Express mailboxes created on non-English-language versions of Windows. Corrected some warnings in the Windows address book import. Improved the File/Import user interface. Most notably, there's now an Advanced button that takes you to a dialog where you can directly specify the files to be imported. MISCELLANEOUS ============= Fixed a crash at startup or shutdown which related to displaying your toolbar ad. Improved Netscape's interaction with Eudora where "Send Page" would cause Netscape to crash. There still might be some systems where this problem persists. Fixed problem where Eudora would not be used in Netscape even though Eudora is the default mailer. Fixed registration problem where Eudora would startup in a different mode even though you were previously in Paid Mode. Fixed esoteric plugin showing double options in Tools-Options. esoteric.epi needs to be copied from your extrastuff directory and to your main Eudora directory. Toolbar ad should now show up. Toolbar ad image should be retained after system colors have changed. controls whether or not the cursor gets temporarily hidden when switching categories in the Tools-Options dialog. The default is enabled. Improved synching with Palm conduit and large messages. Fixed a crash that occurred in the course of Kerberos authentication. Fixed a crash that could occur upon creating a new personality. Fixed a crash that could occur when you clicked on an ad in Sponsored mode. Fixed a bug where a task could hang around in the Task Status window and never go away, if the timing was just right. Fixed a bug where launching Netscape 4.74 while Eudora is running would freeze Eudora. Fixed a bug where an empty window could display at startup. It was supposed to be a notice about a newer version of Eudora, but no text was in the window. Fixed a bug where Eudora would use the CPU heavily for about 60 seconds on startup. Newer versions of some system DLLs are installed: Mfc42.dll: 6.00.8447.0 Msvcirt.dll: 6.00.8168.0 Msvcp60.dll: 6.00.8168.0 (instead of Msvcp50.dll) Msvcrt.dll: 6.00.8397.0 Consequently, a restart of Windows may be necessary after you install Eudora. The installer will offer to do this for you if this is the case. If you use Windows NT or 2000, then you will need to have Administrator rights to install this program. Fixed a bug where a great many spurious toolbar entries would sometimes accumulate in Eudora.ini, causing a noticeable degradation in Eudora's responsiveness. The size of an .mbx file (mailbox) file is now stored in the corresponding .toc (table of contents) file, so that if the .mbx file changes without Eudora's knowledge, we can detect it and avoid losing mail from the mailbox. In particular, this avoids a nasty problem that would arise when Norton AntiVirus 2000 would "quarantine" a .mbx file; if the user subsequently moved the .mbx file back to its original location in the Eudora folder, all of the messages in that mailbox would be lost. Finished fixing continuation of outgoing file changes after Eudora has been quit and reopened. Eudora.exe is now about one megabyte smaller than before. Fixed a tip of the day formatting problem. Further refined the way Eudora determines the folder in which to keep its data. The exact process is described in Readme.txt under EUDORA AND WINDOWS 2000. The Tools/Options dialog no longer shows categories for unavailable features in Light mode. Fixed a bug where the Sponsored, Paid, and Light mode buttons in the Payment & Registration dialog didn't have their background color the same as the system dialog background color. You would notice it if your system color scheme didn't use the standard light gray color for the dialog background. Fixed some resource leaks. Eudora now works with released versions of Netscape up through 4.75, as well as Netscape 6 Preview Release 1 and 2. Improved the appearance of the Directory Services and Filters windows at lower screen resolution. Updated the Auto-completion panel in the Tools/Options dialog. Fixed the tab order of the AutoCompletion panel of the Options dialog, and added a checkbox for including nicknames generated by plugins such as ESP. (The corresponding Eudora.ini setting is DoPluginCompletion.) The signatures, stationery, personalities, address book, task status, task errors, filter report, file browser, and directory services windows, and the mailbox, transfer, stationery, recipient list, personality, and plugin menus are now loaded when first used, rather than at startup. Changed the main window caption from "Eudora Email" back to "Eudora". Fixed a bug where the Task Status and Task Errors windows could fail to display everything they should have. Fixed a bug where Eudora wasn't setting itself as the default mail program in the Internet Options of the Control Panel. Fixed a bug where Eudora would start to check for a newer version every time it started up if it was in fact the newest version. The content of Eudora message windows is now accessible by other applications, via a subset of the Windows EDIT/RICHEDIT messages plus standard text-oriented Windows messages such as WM_COPY. The window class name is EudoraEdit. Edit/Copy now works in the Link History window. Reworded some items in the Profile & Registration dialog. You can now change your registration if you've already registered. Also fixed the tab order in that dialog. The profile "nag" dialog is now centered in the main window. The ad window no longer has a close box when it's floating. ------------------------- NEW EUDORA.INI SETTINGS ------------------------- This section describes the new parameters that are available in the [Settings] section of Eudora.ini in Eudora 5.0. For each setting, its default value is shown to the right of its name. If the setting isn't present, Eudora will behave as if it's present with the default value specified. You can add or change these settings without directly editing your Eudora.ini file by using the x-Eudora-option "hyperlink". For example, to set the value of the OfflineLinkAction setting to 1, you would: - Create a new message - Type into the message - Hold down the Alt key and click on that link - Click OK in the dialog that comes up. The new settings follow. BackupStatisticsDaily 0 If this is set to 1, a backup copy of the Statistics data is made each day in the Eudora data directory. The name of the file is Stats-.xml, where and are replaced by the current month and day. For example, on September 7 it would be called Stats9-7.xml. ConnectionStatusCacheTime 2000 How long to wait between checks of the Internet connection status, in milliseconds. On some systems these checks take a long time, so if Eudora is running very slowly and/or using a lot of CPU time, increasing this value may help. DisableStatistics 0 If this is set to 1, no Statistics data is saved. DoPluginCompletion 1 Indicates whether to include nicknames generated by ESP (and potentially by other Eudora plugins) in the Auto-Completion list. A value of 1 means to include them, and a value of 0 means don't include them. IgnoreEMSDelete 0 If this is 0, ESP control messages devoid of "human friendly" content are automatically deleted to avoid cluttering up your ESP mailboxes. If this is 1, those messages are preserved. MoodWatchDeltaTime 5 MoodWatchThresholdTime 1000 These control background MoodWatch scanning of messages. MoodWatchDeltaTime is how long Eudora must be idle, in seconds, before background MoodWatch scanning starts. MoodWatchThresholdTime is how long it keeps scanning, in milliseconds, once scanning starts. PasswordChangeServer The name of the server to use for changing passwords. By default this is the same as your POP server. SaveStatisticsInterval 15 The Statistics data is saved to disk at intervals of this many minutes. WrapMenus 1 If this is set to 0, menus that are too long for the screen will not wrap, and you may not be able to see all the menu items. On Windows 98/2000/Me, the operating system supports scrolling menus, which you might find more attractive. 3/19/03