Re: [gentoo-dev] Infra support for mail submission with implicit TLS on port 465

2021-08-17 Thread Rolf Eike Beer
Am Dienstag, 17. August 2021, 00:23:26 CEST schrieb Robin H. Johnson: > On Sat, Aug 14, 2021 at 05:15:54PM +0200, Hanno Böck wrote: > > FWIW I am Co-author of the paper that documented these attacks, so in > > case you have any questions I guess I can answer them. > > Yes, I have a question: are

Re: [gentoo-dev] Infra support for mail submission with implicit TLS on port 465

2021-08-16 Thread Robin H. Johnson
On Sat, Aug 14, 2021 at 05:15:54PM +0200, Hanno Böck wrote: > FWIW I am Co-author of the paper that documented these attacks, so in > case you have any questions I guess I can answer them. Yes, I have a question: are you going to claim DJB's $500 qmail security reward? > > Is this supported? I

Re: [gentoo-dev] Infra support for mail submission with implicit TLS on port 465

2021-08-14 Thread Hanno Böck
On Sat, 14 Aug 2021 09:47:25 -0400 Michael Orlitzky wrote: > There have been some attacks on STARTTLS lately, so I'm finally > getting around to using implicit TLS for mail submission on port 465. FWIW I am Co-author of the paper that documented these attacks, so in case you have any questions

[gentoo-dev] Infra support for mail submission with implicit TLS on port 465

2021-08-14 Thread Michael Orlitzky
There have been some attacks on STARTTLS lately, so I'm finally getting around to using implicit TLS for mail submission on port 465. I tried this on dev.gentoo.org, and it seems to work. For example: I just switched Evolution to port 465, with always-on TLS, and am sending this message. Is this