Forwarding email ports

Michael Holstein michael.holstein at csuohio.edu
Mon Feb 5 22:02:18 UTC 2007


> Port 465 doesn't have this problem though as the entire conversation is
> encrypted. Assuming the client doesn't accept a bad certificate and
> leave themselves open to a MITM attack.

<rhetorical>

Who among us actually pays Verisign (et.al.) for a SSL cert for their 
personal MTA?

Besides .. in an anonymous world, how can one really verify the cert 
anyway? .. it's not like you can call $recipient and verify the hash.

</rhetorical>

(oh .. and sorry about forgetting to mention the STARTTLS issue via 
tcp/25 or /587).



More information about the tor-talk mailing list