User Guide
Mail server settings
Assuming your administrator has not indicated otherwise:
- Protocol: IMAPS or IMAP (POP not supported)
- Host/domain: Provided by administrator
- Port: 993
- Connection security: “SSL/TLS”, “Secure connection”; not “STARTTLS”
- Password/Authentication: “Normal”, “plain”
Do not proceed if you receive certificate or security warnings.
Mail submission settings must be provided by your administrator.
Changing your password or settings
To change your Crymap password or Crymap settings, you currently need the
crymap
program. Your administrator should provide this; if not, refer to the
installation subsection for ways to get
crymap
. (This is the same program used to run Crymap on the mail server.)
Changing your password
To change your IMAP password, run the below command, where USER
is the
username you use to log in to IMAP, and HOST
is the host or domain you use to
connect to IMAP:
crymap remote chpw --user=USER --host=HOST
The password change takes effect immediately, but does not terminate existing IMAP sessions.
Note that your Crymap password is independent of your other email password(s), if there are any. You need to change both. (It is possible to use different passwords for the separate systems too, if you prefer, though not all mail clients can work with such a configuration.)
If you find you need to undo the password change, the administrator can help you with that.
Changing key rotation settings
By default, Crymap rotates your mail encryption keys once per month. Rotation is controlled by key name templates, which are filled in with the current time. Changing these templates to include more or less of the date will have the effect of changing the key rotation frequency.
Below are some examples of setting the key rotation.
# Rotate once per day
crymap remote config --external-key-pattern "external-%Y-m-%d" \
--internal-key-pattern "internal-%Y-%m-%d" --user=USER --host=HOST
# Rotate once per year
crymap remote config --external-key-pattern "external-%Y" \
--internal-key-pattern "internal-%Y" --user=USER --host=HOST
# Rotate once per week
crymap remote config --external-key-pattern "external-%Y-%W" \
--internal-key-pattern "internal-%Y-%W" --user=USER --host=HOST
Outbound mail configuration
This section only applies if your site uses Crymap for outbound mail.
Normally, your mail client needs to “send” a message twice: Once to request it to be sent to the recipients, and again to save it into your “Sent” folder. You can configure Crymap to implicitly save sent messages instead, which will make the send process faster and smoother:
# By default you have a "Sent" folder. If you renamed it to something else,
# you need to use that name here. If the folder does not exist, your messages
# will *NOT* be saved!
crymap remote config --smtp-out-save=Sent --user=USER --host=HOST
If you do this, you’ll also need to configure your email client(s) to not also save a copy to the Sent folder themselves.
Whenever Crymap sends email to another server, it generates a “receipt” which includes technical details of the mail transaction. By default, if the transaction succeeds, the receipt is discarded, and if it fails, it is delivered to you as a message in your inbox. Both of these are configurable. In the example below, we assume you’ve created “Success” and “Failure” sub-folders under your default “Sent” folder.
# Configuring this will cause you to also get messages about mail successfully
# sent. If the folder you give here doesn't exist, they'll go to your inbox
# instead. These messages will be delivered already marked as "read".
# To disable, rerun with --smtp-out-success=''
crymap remote config --smtp-out-success-receipts=Sent/Success --user=USER --host=HOST
# Configuring this will change where failure receipts are sent. If the folder
# you give here doesn't exist, they'll go to your inbox instead. You cannot
# disable delivery of these notifications, as they are the only way to find out
# that your mail cannot be sent.
crymap remote config --smtp-out-failure-receipts=Sent/Failure --user=USER --host=HOST
Viewing the current configuration
To view the current configuration, simply run
crymap remote config --user=USER --host=HOST