浏览代码

Link to info about STARTTLS

Bob Mottram 10 年前
父节点
当前提交
9213881f3f
共有 2 个文件被更改,包括 3 次插入3 次删除
  1. 1
    1
      usage.org
  2. 2
    2
      website/usage.html

+ 1
- 1
usage.org 查看文件

@@ -23,7 +23,7 @@ You should transfer any passwords to a password manager such as [[http://www.kee
23 23
 To exit you can either just close the terminal or use *CTRL-x CTRL-c* followed by the *exit* command.
24 24
 * Using Email
25 25
 ** A technical note about email transport security
26
-Port 465 is used for SMTP and this is supposedly deprecated for secure email. However, using TLS from the start of the communications seems far more secure than starting off with insecure communications and then trying to upgrade it with a command to begin TLS, as happens with STARTTLS. There are possible attacks against STARTTLS in which the command to begin secure communications is removed or overwritten which could then result in email being transferred in plain text over the internet and be readable by third parties.
26
+Port 465 is used for SMTP and this is supposedly deprecated for secure email. However, using TLS from the start of the communications seems far more secure than starting off with insecure communications and then trying to upgrade it with a command to begin TLS, as happens with STARTTLS. There are [[https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks][possible attacks against STARTTLS]] in which the command to begin secure communications is removed or overwritten which could then result in email being transferred in plain text over the internet and be readable by third parties.
27 27
 ** Add a password to your GPG key
28 28
 If you didn't use existing GPG keys during the Freedombone installation then you'll need to add a password to your newly generated private key. This is highly recommended. Go through the following sequence of commands to ssh into the Freedombone and then change your GPG password.
29 29
 

+ 2
- 2
website/usage.html 查看文件

@@ -4,7 +4,7 @@
4 4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5 5
 <head>
6 6
 <title></title>
7
-<!-- 2014-10-27 Mon 22:46 -->
7
+<!-- 2014-11-11 Tue 21:13 -->
8 8
 <meta  http-equiv="Content-Type" content="text/html;charset=utf-8" />
9 9
 <meta  name="generator" content="Org-mode" />
10 10
 <meta  name="author" content="Bob Mottram" />
@@ -223,7 +223,7 @@ To exit you can either just close the terminal or use <b>CTRL-x CTRL-c</b> follo
223 223
 <h3 id="unnumbered-3">A technical note about email transport security</h3>
224 224
 <div class="outline-text-3" id="text-unnumbered-3">
225 225
 <p>
226
-Port 465 is used for SMTP and this is supposedly deprecated for secure email. However, using TLS from the start of the communications seems far more secure than starting off with insecure communications and then trying to upgrade it with a command to begin TLS, as happens with STARTTLS. There are possible attacks against STARTTLS in which the command to begin secure communications is removed or overwritten which could then result in email being transferred in plain text over the internet and be readable by third parties.
226
+Port 465 is used for SMTP and this is supposedly deprecated for secure email. However, using TLS from the start of the communications seems far more secure than starting off with insecure communications and then trying to upgrade it with a command to begin TLS, as happens with STARTTLS. There are <a href="https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks">possible attacks against STARTTLS</a> in which the command to begin secure communications is removed or overwritten which could then result in email being transferred in plain text over the internet and be readable by third parties.
227 227
 </p>
228 228
 </div>
229 229
 </div>