Re: sniffing plaintext protocols

From: Tonnerre Lombard (tonnerre.lombard@sygroup.ch)
Date: Tue Aug 15 2006 - 02:59:41 EDT


Salut,

On Sat, 2006-08-12 at 00:57 +0200, Joachim Schipper wrote:
> > Well pgp does address another area compared to TLS or pop3s. On the
> > other hand I agree to combine both!
>
> Only if you configure your MUA not to downgrade to plain SMTP when TLS
> is not available, and so on - there isn't too much point otherwise.

In fact, every MTA which is between you and your communication partner
must be configured not to downgrade to plain SMTP. Which most of them
just do.

                                Tonnerre

-- 
SyGroup GmbH
Tonnerre Lombard
Loesungen mit System
Tel:+41 61 333 80 33    Roeschenzerstrasse 9
Fax:+41 61 383 14 67    4153 Reinach BL
Web:www.sygroup.ch      tonnerre.lombard@sygroup.ch




This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:56:43 EDT