[tor-talk] Can't use TORBirdy to send Email

[Jacob Appelbaum]

Karsten N.:
> On 08/31/2012 01:18 PM, tor user22 wrote:
>> Just installed TORBirdy on ThunderBird on FireFox 15.0 and added Yahoo
>> Email account ,but can't send any email, though receive is OK.when TORBirdy
>> is disabled everything is fine.
> 
> Hi,
> 
> Yahoo does not support TLS/SSL with secure renegotiation for SMTP servers.
> 
>   > openssl s_client -connect smtp.mail.yahoo.com:465
>   ...
>   New, TLSv1/SSLv3, Cipher is AES256-SHA
>   Server public key is 2048 bit
>   Secure Renegotiation IS NOT supported
> 
> 
> Because of security reasons TorBirdy requires secure renegotiation for
> TLS connections. Insecure renegotiation is a well known bug in the SSL
> protocol since 2009.
> 
> I have only one recommendation: use an other mail provider.

I have another - I've cc'ed security at yahoo.com and perhaps they will be
able to let us know if this is intended behavior...

All the best,
Jacob