Hi

On Tuesday 21 January 2014 at 6:46:25 AM, in
<mid:1852040294.20140121014...@gmail.com>, Leonard S. Berkowitz wrote:



> Here is the entires "set" for one connect interval:

>  1/20/2014, 22:32:00: FETCH - receiving mail messages
>  1/20/2014, 22:32:00: FETCH - Connecting to POP3 server
>  pop.gmail.com on port 995 1/20/2014, 22:32:00: FETCH -
>  Initiating TLS handshake
>>1/20/2014, 22:32:00: FETCH - Certificate S/N: 011E8403, algorithm: RSA (512 
>>bits), issued from 10/5/2012 10:19:13 PM to 9/30/2032 10:19:13 PM, for 1 
>>host(s): pop.gmail.com.
>>1/20/2014, 22:32:00: FETCH - Owner: EN, pop.gmail.com.
>>1/20/2014, 22:32:00: FETCH - This certificate is self-issued.
>  1/20/2014, 22:32:00: FETCH - TLS handshake complete
>  1/20/2014, 22:32:00: FETCH - connected to POP3 server
>  1/20/2014, 22:32:01: FETCH - authenticated (plain)
>  1/20/2014, 22:32:01: FETCH - 0 messages in the mailbox, 0 new
>  1/20/2014, 22:32:01: FETCH - connection finished - 0 messages received

> Does this tell you anything?  

It tells me the certificate you already mentioned is self-signed.

Gmail doesn't use self-signed certificates. You have an MITM attack
going on there, as Jernej already said. I have no way to tell if it is
malicious, or something "friendly" installed on your computer or
network.


-- 
Best regards

MFPA                    mailto:2014-667rhzu3dc-lists-gro...@riseup.net

Take my advice - I don't use it anyway. 

Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600 Service Pack 3 


________________________________________________
Current version is 6.1.8 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to