4 ms·
I'm seeing TLS connections with google, both inbound and outbound: Anonymous: TLSv1 with cipher RC4-SHA (128/128 bits) 209.85.214.42 mail-bk0-f42.googl
by joe_bleau 14y ago
I'm seeing TLS connections with google, both inbound and outbound:
Anonymous: TLSv1 with cipher RC4-SHA (128/128 bits)
209.85.214.42 mail-bk0-f42.google.com
209.85.160.42 mail-pb0-f42.google.com
209.85.213.170 mail-yx0-f170.google.com
209.85.214.198 mail-ob0-f198.google.com
- ajross 14y agoThat's good to know. Maybe I have my postfix misconfigured, I'll check. Still, the MitM hole is present. Without destination host verification, the FBI could simply sit outbound on the network insert themselves into the transaction.
- joe_bleau 14y agoAgreed. Something else is weird; I see both trusted and untrusted outgoing SMTP TLS connections in the logfiles, including untrusted connections to machines that I know have valid startssl certs. Maybe I have my postfix misconfigured as well!