nanog mailing list archives

Re: Transparent hijacking of SMTP submission...


From: Jay Ashworth <jra () baylink com>
Date: Thu, 27 Nov 2014 21:54:54 -0500 (EST)

----- Original Message -----
From: "William Herrin" <bill () herrin us>

I'm not sure I follow your complaint here. Are you saying that Comcast
or a
Comcast customer in Washington state stripped the STARTTLS verb from
the
IPv4 port 587 SMTP submission connection between you and a third
party?

And, of course, *just* as I hit send, I remembered it was in RISKS, linking
to EFF:

  https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks

Note that's dated 11 November, so this is a couple weeks old now.

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra () baylink com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates       http://www.bcp38.info          2000 Land Rover DII
St Petersburg FL USA      BCP38: Ask For It By Name!           +1 727 647 1274


Current thread: