Re: THE SAD STATE OF SMTP ENCRYPTION - is OpenSMTPD also vulnerable?

[Johannes Löthberg]

On 11/05, Seth wrote:

On Mon, 11 May 2015 13:43:23 -0700, Johannes Löthberg

Yeah, that seems like a good thing to offer even if it isn't used much,
especially combined with the above suggestion. (I for one support SMTPS,
for one due to having personally experienced STARTTLS stripping MITM.)

How were you able to detect the STARTTLS stripping MITM? I want to know how much of this is going on with my own email.

--
Sincerely,
 Johannes Löthberg
 PGP Key ID: 0x50FB9B273A9D0BB5
 https://theos.kyriasis.com/~kyrias/

I was forcing STARTTLS on the client side, and it kept failing on that network, so I decided to try connecting manually, and et voila.. I think it stripped some other headers as well.

signature.asc
Description: PGP signature