[tor-bugs] #6383 [Flashproxy]: Email registration helper
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Tue Sep 11 07:12:07 UTC 2012
#6383: Email registration helper
------------------------+---------------------------------------------------
Reporter: dcf | Owner: dcf
Type: defect | Status: new
Priority: normal | Milestone:
Component: Flashproxy | Version:
Keywords: | Parent:
Points: | Actualpoints:
------------------------+---------------------------------------------------
Comment(by dcf):
Replying to [comment:3 dcf]:
> > But unfortunately, on first investigation this incoming SMTP doesn't
support TLS, so our messages will be blockable just by grepping for
whatever designated address we use.
>
> Ignoring the lack of TLS, here is a proof of concept for determining our
external IP address and sending it in email to a Gmail address:
My bad, port 25 on gmail-smtp-in.l.google.com has STARTTLS. You can make
it work by adding {{{smtp.starttls()}}} to the previous program. Then we
have to make sure that the plaintext before STARTTLS is not
fingerprintable, in addition to whatever fingerprinting concerns there are
with the TLS connection itself.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6383#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list