Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 7 Mar 2014 12:56:15 +0400
From: Solar Designer <>
Subject: Re: IMAP STARTTLS sniff tool


On Fri, Mar 07, 2014 at 09:37:01AM +0100, Bob Ezrin wrote:
> Hi all. We managed succesfully to sniff inside POP3S, SMTPS, IMAPS & HTTPS tunnels using arpspoof, iptables & sslsplit to make MITM. Now we want to sniff inside STARTTLS tunnels (specifically IMAP) but unfortunately sslsplit doesn't supports STARTTLS. Is there/do you know another SSL/TLS tool supporting IMAP over STARTTLS to make MITM? Many thanks B.

Sorry for not addressing your (mostly off-topic) question directly (I
don't know the answer), but it got me wondering what the most
appropriate mailing list would be for this sort of topics.  We mostly
haven't been using the oss-security list for such topics so far, and it
is unclear whether such broader scope is desirable or not.  In part,
this might depend on whether there exists a more suitable list or not.

I'd think that maybe the Penetration Testing list could be it:

but it appears rather inactive lately.  Yet I think it's worth posting
the question in there, at least to see if the list is currently usable
(would anyone reply?)  Bob, can you try that?



Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.