MailNews Talk:Account Wizard:Email

For the security setting, how about this:

Connection type: [Standard connection \/]
                  TLS if available
                  Secure (TLS)
                  Secure (SSL)

There is also the issue that we need to change those labels to actually mean something - they are simply wrong at the moment. (The SMTP ones has already been fixed.) https://bugzilla.mozilla.org/show_bug.cgi?id=350314#c14

I have to say I liked the original proposal with the checkbox *much* better. I don't see much point with trying to find user friendly labels (be that "Standard" or "Auto" that doesn't mean anything to anyone - these are choices the ISP gives the user, usually if you don't pick the right one it just doesn't work... So the emphasis should be on giving labels e.g. at least tech support easily would grasp, and be able to help the user if they select the wrong one. What I mean is: users don't know either way, nor should they have to, if they actually choose on their own, that will only cause them trouble.

Incoming Server: [ imap.doe.mail      ] Port: [143]
[ ] Use Secure Connection [  STARTTLS, if available \/]
                          |  STARTTLS                 |
                          |  IMAP-over-SSL            |

Standard Connection/Authentication

I like that term standard for secure authentication since a secure connection is not as common and the word standard doesn't imply anything wrong. If we set it to the default choice it would be what everyone sees and likely wouldn't change for other, more secure and less common authentications.

Authentication type: [Standard (Open Authentication) |v]
                      Secure (SASL)
                      Secure (CRAM-MD5)

However for the connection type perhaps we should go with something else besides standard. Not necessarily insecure... Perhaps the key is to make standard, not the default. Maybe something like this? not too happy with it right now...

Connection type: [Secure (TLS if available) |v]
                  Standard (Open Connection)
                  Secure (TLS)
                  Secure (SSL)

The goal should be to select the best option for a secure connection, since our assumption is that it's better and more common, and leave the standard or open connection as an option less appealing.

Secure connection

"TLS if available" isn't a secure connection. How about this:

Connection type: [Auto (TLS if available) \/]
                  Insecure (Open)
                  Auto (TLS if available)
                  Secure (TLS)
                  Secure (SSL)

Auto and Standard?

Nice, I like auto! Can we keep standard for the open connection? We don't necessarily know that the connection will be insecure (there could be other security measures happening) so I want to avoid the negative.

Connection type: [Auto (TLS if available) |v]
                  Standard (Open Connection)
                  Auto (TLS if available)
                  Secure (TLS)
                  Secure (SSL)