Forwarding email ports
Michael Holstein
michael.holstein at csuohio.edu
Mon Feb 5 22:02:18 UTC 2007
> Port 465 doesn't have this problem though as the entire conversation is
> encrypted. Assuming the client doesn't accept a bad certificate and
> leave themselves open to a MITM attack.
<rhetorical>
Who among us actually pays Verisign (et.al.) for a SSL cert for their
personal MTA?
Besides .. in an anonymous world, how can one really verify the cert
anyway? .. it's not like you can call $recipient and verify the hash.
</rhetorical>
(oh .. and sorry about forgetting to mention the STARTTLS issue via
tcp/25 or /587).
More information about the tor-talk
mailing list