Delivery-Date: Tue, 22 Jul 2014 03:41:42 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RCVD_IN_SORBS_WEB,RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 2CF491E0D04
	for <archiver@seul.org>; Tue, 22 Jul 2014 03:41:40 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 4013E30479;
	Tue, 22 Jul 2014 07:41:36 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 6B1283034F
 for <tor-talk@lists.torproject.org>; Tue, 22 Jul 2014 07:29:36 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id fVcZzNo7db3g for <tor-talk@lists.torproject.org>;
 Tue, 22 Jul 2014 07:29:36 +0000 (UTC)
Received: from server500gb.chello.at (unknown [212.186.51.184])
 (using TLSv1 with cipher AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 27134302DE
 for <tor-talk@lists.torproject.org>; Tue, 22 Jul 2014 07:29:36 +0000 (UTC)
Received: from 127.0.0.1
 by server500gb.chello.at with esmtpsa (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
 (Exim latest) (envelope-from <elrippo@elrippoisland.net>)
 id 1X9UVi-0004DK-8I
 for tor-talk@lists.torproject.org; Tue, 22 Jul 2014 09:29:32 +0200
From: Elrippo Athletico <elrippo@elrippoisland.net>
To: tor-talk@lists.torproject.org
Date: Tue, 22 Jul 2014 09:29:15 +0200
References: <410b33eaee13d4efc1df90f36952864c@triangulum.uberspace.de>
 <201407211021.38816.elrippo@elrippoisland.net>
 <20140721103121.6f46afc9@gate.rlogin.net>
In-Reply-To: <20140721103121.6f46afc9@gate.rlogin.net>
MIME-Version: 1.0
Message-Id: <201407220929.15634.elrippo@elrippoisland.net>
X-SA-Exim-Rcpt-To: tor-talk@lists.torproject.org
X-SA-Exim-Mail-From: elrippo@elrippoisland.net
X-SA-Exim-Version: 4.2.1 (built Sun, 08 Jan 2012 03:05:19 +0000)
X-SA-Exim-Scanned: Yes (on server500gb.chello.at)
X-Elrippo-NOT-TRUSTED-Header: This is a verfication,
 that your message is handled by
 server500gb.chello.at
X-Elrippo-SMTP-Header: This is a verfication,
 that your message is handled by server500gb.chello.at
Subject: Re: [tor-talk] Outbound SMTP via TOR? (slightly OT)
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============1712184141757598809=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

--===============1712184141757598809==
Content-Type: multipart/signed;
  boundary="nextPart4344420.jWHeZqPg4A";
  protocol="application/pgp-signature";
  micalg=pgp-sha1
Content-Transfer-Encoding: 7bit

--nextPart4344420.jWHeZqPg4A
Content-Type: Text/Plain;
  charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Am Montag, 21. Juli 2014, 11:31:21 schrieb mick:
> On Mon, 21 Jul 2014 10:21:33 +0200
>=20
> Elrippo Athletico <elrippo@elrippoisland.net> allegedly wrote:
> > Depends, on wether you trust a CA, for example VeriSign, who just
> > want your money, or wether you go trough a personal verification
> > process at cacert.org, like i did, where you sit face to face with
> > your assurer.
> >=20
> > If you want, you can install the cacert.org root certificates ->
> > http://www.cacert.org/index.php?id=3D3
> >=20
> > It would be a good idea to get some knowledge about CA's and the
> > processes for verification, before you talk about an untrusted HTTP
> > connection secured with SSL/TLS
>=20
> And of course you will get a similar warning when connecting to a site
> which uses a self signed certificate. Whether you trust that site
> depends on your use case and trust model.

Jope, but mostly people are not checking the certificates, just wondering w=
hy=20
this is untrusted....


>=20
> Personally I think the CA model is largely broken. I make my own
> choices about whether to trust a site.

Jope #2, that's why i chose cacert.org



> Hell, most people are perfectly
> happy to connect to /any/ site without SSL/TLS.

Jope #3, but in case of an authentification model like user:pwd you should =
have=20
encryption



> Why complain about a
> site which offers encryption, but doesn't conform to the wider CA
> model?

I don't know, but when i used a self signed cert, mostly peolpe complained=
=20
that i use a self signed and everybody could target a MITM with a self sign=
ed=20
cert, that "looks" like my self signed cert. So i got me a CA cert :D


>=20
> Mick

Elrippo

> ---------------------------------------------------------------------
>=20
>  Mick Morgan
>  gpg fingerprint: FC23 3338 F664 5E66 876B  72C0 0A1F E60B 5BAD D312
>  http://baldric.net
>=20
> ---------------------------------------------------------------------


=2D-=20
We don't bubble you, we don't spoof you ;)
Keep your data encrypted!
Log you soon,
your Admin
elrippo@elrippoisland.net

Encrypted messages are welcome.
0x84DF1F7E6AE03644

=2D----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=46Lzs/Nq3tYAYvVivhPloSxmYBPsafYHCZM83yBNNsralXh5zjB+di90G+AMXt2PN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3D
=3DotlL
=2D----END PGP PUBLIC KEY BLOCK-----

--nextPart4344420.jWHeZqPg4A
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQIcBAABAgAGBQJTzhLLAAoJECRD3evZUNHrMl8P/39sYDGkBt/XKuKzqu33Ed8t
T1cf082IsXKmE31dk0HiZ5JHzmnW9ckZI5hoRDS8Bu0lBzStv3ZAl8Oc4iS5PSAZ
5Z6XM2rgHgFCLmPf0aYybhjK70ifTMXCI3ZYhZbXmbiKduxV1KfTpn7eYm8iWG5Y
8JGQqLYRLc3P3bXY/fcEksRCyfCeaToz19c4r7DekQmnd1EdOAg+PBLWLJevqffg
WIO8fuYH6nY4tqIqCGLFAdVeZdyrWsgKMVOvjdsPrhtg3rtz199tf01iunwce4j0
hy7+OYSsuHj9R63SX5z6sSZJVTlRQ9hV5Fkp3O9jJ2HsLI/+KwIrr0J5d0Y2oZhQ
nB3L6jmTdhv8c0sz8U/pf1FbZidsAqJs8chPhryiJ5hH1fmoyiA826vk5AHD67SZ
5/UT8tjl1X0h8VnIobRvRkjxp4HgjeLyx7xip6FX+Ci3gqJFw6UhAJqYPpr0ER+0
X9q35OyoGOKzc+3ooqrX8q34UdG3Ry27UYhPLonmyRt84sCr2i0y/RPX4QzseFkk
+uqfp6uzvZyjq2A7fw4DMpp8qKKFkPgIzB+R+j0+Xd+yTettS56ItBIpjKd3V6P0
h1yNo6TbJJrvYqldR+USue9RY9jy97u4o3uTqjTMW6PSRwLkxivLNHCbdbyWN8w5
wyhX4ebkUkwMumsq/qdh
=bYnd
-----END PGP SIGNATURE-----

--nextPart4344420.jWHeZqPg4A--

--===============1712184141757598809==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============1712184141757598809==--

