Re: Web Tool Announcement: ismymailsecure.com

2010-08-25 Thread Kari Hurtta
Holger Rabbach hrabb...@crossroad-networks.com: (Wed Aug 18 12:59:19 2010) [ Charset ISO-8859-1 converted... ] Dear Bugtraq community, I am happy to announce the immediate availability of a web based email security testing tool at http://www.ismymailsecure.com. The tool is an end-user

Re: Web Tool Announcement: ismymailsecure.com

2010-08-25 Thread Kari Hurtta
to be any connection also checking of signature of certificate agaist CA does not help much. It does not protect attack agaist MX records on DNS. On 25/08/2010 09:59, Kari Hurtta wrote: Holger Rabbach hrabb...@crossroad-networks.com: (Wed Aug 18 12:59:19 2010) [ Charset ISO-8859-1 converted

Re: severe error in SSH session key recovery patch

2001-02-12 Thread Kari Hurtta
-- With the patch, the lifespan of the server key still does not go below one minute. As mentioned in CORE SDI's advisory, the number of server connections necessary to carry out the attack is normally very large but "the number of connections given is for the average