Re: Web Tool Announcement: ismymailsecure.comAug 25 2010 07:59AM Kari Hurtta hurtta+bugtraq (at) leija.mh.fmi (dot) fi [email concealed] (hurtta+bugtraq leija mh fmi fi) (1 replies)
Holger Rabbach <hrabbach (at) crossroad-networks (dot) com [email concealed]>: (Wed Aug 18 12:59:19 2010)
[ Charset ISO-8859-1 converted... ]
> Dear Bugtraq community,
>
> I am happy to announce the immediate availability of a web based email
> security testing tool at http://www.ismymailsecure.com. The tool is an
> end-user friendly way to determine if the mail servers for a certain
> email address support the STARTTLS capability to encrypt the email
> transfer between servers. While most email providers have frontends that
> use encryption, the actual email transfers via SMTP are often not secure
It seems not check if certificate returned is signed by trusted CA.
[ Charset ISO-8859-1 converted... ]
> Dear Bugtraq community,
>
> I am happy to announce the immediate availability of a web based email
> security testing tool at http://www.ismymailsecure.com. The tool is an
> end-user friendly way to determine if the mail servers for a certain
> email address support the STARTTLS capability to encrypt the email
> transfer between servers. While most email providers have frontends that
> use encryption, the actual email transfers via SMTP are often not secure
It seems not check if certificate returned is signed by trusted CA.
[ reply ]