free
/
freedombone
Watch 1
Star 0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
Browse Source

Link to info about STARTTLS

Bob Mottram 10 years ago
parent
fc07be049b
commit
9213881f3f
2 changed files with 3 additions and 3 deletions
Unified View Show Diff Stats
  1. 1
    1
      usage.org
  2. 2
    2
      website/usage.html

+ 1
- 1
usage.org View File

23 
 To exit you can either just close the terminal or use *CTRL-x CTRL-c* followed by the *exit* command.
 23 
 To exit you can either just close the terminal or use *CTRL-x CTRL-c* followed by the *exit* command.
24 
 * Using Email
 24 
 * Using Email
25 
 ** A technical note about email transport security
 25 
 ** A technical note about email transport security
26 
-Port 465 is used for SMTP and this is supposedly deprecated for secure email. However, using TLS from the start of the communications seems far more secure than starting off with insecure communications and then trying to upgrade it with a command to begin TLS, as happens with STARTTLS. There are possible attacks against STARTTLS in which the command to begin secure communications is removed or overwritten which could then result in email being transferred in plain text over the internet and be readable by third parties.
26 
+Port 465 is used for SMTP and this is supposedly deprecated for secure email. However, using TLS from the start of the communications seems far more secure than starting off with insecure communications and then trying to upgrade it with a command to begin TLS, as happens with STARTTLS. There are [[https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks][possible attacks against STARTTLS]] in which the command to begin secure communications is removed or overwritten which could then result in email being transferred in plain text over the internet and be readable by third parties.
27 
 ** Add a password to your GPG key
 27 
 ** Add a password to your GPG key
28 
 If you didn't use existing GPG keys during the Freedombone installation then you'll need to add a password to your newly generated private key. This is highly recommended. Go through the following sequence of commands to ssh into the Freedombone and then change your GPG password.
 28 
 If you didn't use existing GPG keys during the Freedombone installation then you'll need to add a password to your newly generated private key. This is highly recommended. Go through the following sequence of commands to ssh into the Freedombone and then change your GPG password.
29
29

+ 2
- 2
website/usage.html View File

4 
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
 4 
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5 
 <head>
 5 
 <head>
6 
 <title></title>
 6 
 <title></title>
7 
-<!-- 2014-10-27 Mon 22:46 -->
7 
+<!-- 2014-11-11 Tue 21:13 -->
8 
 <meta  http-equiv="Content-Type" content="text/html;charset=utf-8" />
 8 
 <meta  http-equiv="Content-Type" content="text/html;charset=utf-8" />
9 
 <meta  name="generator" content="Org-mode" />
 9 
 <meta  name="generator" content="Org-mode" />
10 
 <meta  name="author" content="Bob Mottram" />
 10 
 <meta  name="author" content="Bob Mottram" />
223 
 <h3 id="unnumbered-3">A technical note about email transport security</h3>
 223 
 <h3 id="unnumbered-3">A technical note about email transport security</h3>
224 
 <div class="outline-text-3" id="text-unnumbered-3">
 224 
 <div class="outline-text-3" id="text-unnumbered-3">
225 
 <p>
 225 
 <p>
226 
-Port 465 is used for SMTP and this is supposedly deprecated for secure email. However, using TLS from the start of the communications seems far more secure than starting off with insecure communications and then trying to upgrade it with a command to begin TLS, as happens with STARTTLS. There are possible attacks against STARTTLS in which the command to begin secure communications is removed or overwritten which could then result in email being transferred in plain text over the internet and be readable by third parties.
226 
+Port 465 is used for SMTP and this is supposedly deprecated for secure email. However, using TLS from the start of the communications seems far more secure than starting off with insecure communications and then trying to upgrade it with a command to begin TLS, as happens with STARTTLS. There are <a href="https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks">possible attacks against STARTTLS</a> in which the command to begin secure communications is removed or overwritten which could then result in email being transferred in plain text over the internet and be readable by third parties.
227 
 </p>
 227 
 </p>
228 
 </div>
 228 
 </div>
229 
 </div>
 229 
 </div>