Another change I found
Yahoo settings are no longer available for Rogers/Yahoo email
If you go to email settings, if you want to work with your primary and secondary accounts, you will need to click on your Name and then click on account info
Where it will take you to the new Rogers member page where you can work with your primary and secondary accounts. You can add or delete accounts from the Manage email accounts section.
Depending upon which one of your emails you logged into, you will be able to do a limited set of tasks under account information.
This includes changing your personal information (first and last name and language)
Change your password
Set alternate contact information (a second email say from Google or whatever), plus your phone number (should be a mobile as it is used to send you texts) and is critical for the "authorized passwords" for devices as you will may need to have verification messages sent to one or the other.
Clarification on SSL
In the earlier posts, it refers to a post from 2014 where it described how to set SSL on, although it uses the old pop.broadband.rogers.com and smtp.broadband.rogers.com and imap.broadband.rogers.com
and the related port numbers.
I am unsure why the posts from Rogers are talking about these, as the SSL has been required since 2014. There was an issue with expired security certificates earlier this year, that people had to deal with and the only place where this whole discussion comes into play is if you are setting up one of the "older" or unsuported email clients.
The requirement for the full user name as your email address xx@rogers.com is also not new - Yahoo began requiring this earlier this year as well, as the same user name may exist with another provider using Yahoo services and so therefore, must have the domain address included.
Again, this is relevant only to new installs of email, and as far as I am aware, we all had to deal with these two issues earlier.
The PassKey Model
Interestingly, it seems that Rogers is using a slightly different verification process than if you set up a new yahoo account.
It looks more like a one time 2 stage authorization process, which probably is facilitating a one time setup of what has been described earlier as OAuth or Open Security authorization. There were risks in the early versions of scraping the masked password or passkey, but that is supposed to have been resolved in the latest version 2.
I funny one is what security experts are commenting about which is the new name for Yahoo and AOL, Oath, which they descirbe as a variation to the security protocal of OAuth, which they describe as laughable given the security holes that both companies have experienced. Probably not a great choice of name for people who are in the know. They continue to be a joke and their history persists with the new name chosen by Verizon.
Rogers has chosen to have their own web access, where you can neither turn off the PassKey or turn off or turn on 2 step authorization, so it would appear that there is no way but to do it the way they have presented it.
So yes, Rogers does have a roll in this design - they have chosen to taken a different approach than Yahoo.
Yahoo's use of the Pass Key sends an approval to another device, and it must be a cell phone (don't ask me what you would do if you don't have SMS - and before anyone says who doesn't, some people don't use text and wouldn't know what to do with it anyway - like my inlaws and others I know - they are just not interested. Thre cell phone is merely an emergency calling device).
But with the model from Yahoo, they will occasionally send you a new authorization for your to approve.
The details on how to handle the setup for olde email clients is at http://communityforums.rogers.com/t5/How-To-Videos-Knowledge-Articles/How-To-Updating-your-Rogers-Ya...
But important missing information:
For some products like Outlook 2013 and 2016, there is a box under the remember password named -
The yahoo model for setup requires the box “Require logon using Secure Password Authentication (SPA)” to be checked as that is what makes the authentication process work with their 3rd party authentatication server.
I wonder if Rogers has turned this off, although if it is, then they are only using what is really a two stage one time authorization with this password that is created in the member centre, not OAuth.
Could @RogersRoland please check on this requirement of the SPA box as Yahoo requires it in their implementation.
To complete, I will still say, this is yet another example of poor communication and implementation with Rogers technical changes related to security certifcates - this is not the first time we have run into security certificate issues with Rogers website applications and related protocols in the last couple of years - online home voicemail, and one number come to mind immediately, but there have been others.
In addition, I still say "why has Rogers stayed with yahoo for so long?" It is not trusted by the industry in general, and maybe it will be better with Verizon.
As a final note, this will all be relatively easy with modern phones and their account setups, as long as you use the automated set up for Yahoo.
This notice got rolled out too soon as the member centre didn't go live until today, and then required me to go through another learning curve.
And by the way, why when we were told months ago that POP would no longer work, did it work when I set it up on an old Pegasus email client (from about 2004)?
Just one more mystery of Yahoo, its security models and subsequently the impact on the providers like Rogers, and most importantly on us.
There is certainly going to be a learning curve for those that have stayed with their older email clients, and even newer ones like outlook 2016 which is not exactly old.
The model is primarily designed for using web mail with clients that have been designed for modern phones, with what seems to be workarounds for older clients.
Ahh well, the challenge goes on.
I will leave it to others to write up and test the new model once they turn it on - whenever that will be.
Bruce
RogersCilio
