On Sun, Sep 29, 2019 at 05:33:53PM -0400, Viktor Dukhovni wrote:
> Reliably detecting a Google-operated SMTP server may be non-trivial.
That said, the Google SMTP server certificate does provide a crib
for the popular names (resorted):
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: mx.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: aspmx.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt1.aspmx.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt2.aspmx.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt3.aspmx.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt4.aspmx.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: gmail-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt1.gmail-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt2.gmail-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt3.gmail-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt4.gmail-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: gmr-mx.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: gmr-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt2.gmr-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt3.gmr-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: alt4.gmr-smtp-in.l.google.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: aspmx2.googlemail.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: aspmx3.googlemail.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: aspmx4.googlemail.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: aspmx5.googlemail.com
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: mx1.smtp.goog
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: mx2.smtp.goog
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: mx3.smtp.goog
posttls-finger: alt1.gmr-smtp-in.l.google.com[2a00:1450:4010:c03::e]:25:
subjectAltName: mx4.smtp.goog
Names not listed in the certificate are presumably not nearly as
frequently used.
--
Viktor.
