[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #6383 [Flashproxy]: Email registration helper
#6383: Email registration helper
------------------------+---------------------------------------------------
Reporter: dcf | Owner: dcf
Type: defect | Status: new
Priority: normal | Milestone:
Component: Flashproxy | Version:
Keywords: | Parent:
Points: | Actualpoints:
------------------------+---------------------------------------------------
Comment(by dcf):
Replying to [comment:3 dcf]:
> > But unfortunately, on first investigation this incoming SMTP doesn't
support TLS, so our messages will be blockable just by grepping for
whatever designated address we use.
>
> Ignoring the lack of TLS, here is a proof of concept for determining our
external IP address and sending it in email to a Gmail address:
My bad, port 25 on gmail-smtp-in.l.google.com has STARTTLS. You can make
it work by adding {{{smtp.starttls()}}} to the previous program. Then we
have to make sure that the plaintext before STARTTLS is not
fingerprintable, in addition to whatever fingerprinting concerns there are
with the TLS connection itself.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6383#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs