bugtraq - Re: Web Tool Announcement: ismymailsecure.com

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 25 Aug 2010 10:59:56 +0300 (EEST)
From: Kari Hurtta <hurtta+bugtraq@...ja.mh.fmi.fi>
To: Holger Rabbach <hrabbach@...ssroad-networks.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: Web Tool Announcement: ismymailsecure.com

Holger Rabbach <hrabbach@...ssroad-networks.com>: (Wed Aug 18 12:59:19 2010)
[ Charset ISO-8859-1 converted... ]
> Dear Bugtraq community,
> 
> I am happy to announce the immediate availability of a web based email
> security testing tool at http://www.ismymailsecure.com. The tool is an
> end-user friendly way to determine if the mail servers for a certain
> email address support the STARTTLS capability to encrypt the email
> transfer between servers. While most email providers have frontends that
> use encryption, the actual email transfers via SMTP are often not secure

It seems not check if certificate returned is signed by trusted CA.