[tor-bugs] #6383 [Flashproxy]: Email registration helper

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Sep 11 07:12:07 UTC 2012


#6383: Email registration helper
------------------------+---------------------------------------------------
 Reporter:  dcf         |          Owner:  dcf
     Type:  defect      |         Status:  new
 Priority:  normal      |      Milestone:     
Component:  Flashproxy  |        Version:     
 Keywords:              |         Parent:     
   Points:              |   Actualpoints:     
------------------------+---------------------------------------------------

Comment(by dcf):

 Replying to [comment:3 dcf]:
 > > But unfortunately, on first investigation this incoming SMTP doesn't
 support TLS, so our messages will be blockable just by grepping for
 whatever designated address we use.
 >
 > Ignoring the lack of TLS, here is a proof of concept for determining our
 external IP address and sending it in email to a Gmail address:

 My bad, port 25 on gmail-smtp-in.l.google.com has STARTTLS. You can make
 it work by adding {{{smtp.starttls()}}} to the previous program. Then we
 have to make sure that the plaintext before STARTTLS is not
 fingerprintable, in addition to whatever fingerprinting concerns there are
 with the TLS connection itself.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6383#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list