[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] TLS/SSL SMTP MitM



On Mon, Mar 10, 2014 at 06:43:31PM +0000, Gordon Morehouse wrote:
> I have been doing some testing of sending email over Tor and today ran
> into a definite BadExit (but not flagged, clearly) because there was a
> blatant MitM attempt on three separate occasions when I initiated a
> TLS/SSL SMTP connection to my mail provider.  

Given that you used SSL SMTP, I assume your connection went to port 465?

I probed all ~400 currently available exit relays which allow exiting to port
465 but could not spot any MitM attacks yet.

Cheers,
Philipp
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk