News for hackers. Stuff that matters.

A comment on NSA admits listening to U.S. phone calls without warrants. Parent comment

Re:NSA admits listening to U.S. phone calls without warrants by tptacek on Saturday June 15, 2013 @09:40PM (#5887036)
You're seeing Yahoo inbounds with TLS enabled? Because the service posted downthread seems to show that Yahoo won't accept inbound mail with TLS.
[ Parent | on HN ]
Re:NSA admits listening to U.S. phone calls without warrants by dhess on Saturday June 15, 2013 @09:54PM (#5887090)
> Edit: sorry, I reversed the polarity wrt. your question. This confirms the other finding, i.e., Yahoo sends via TLS but doesn't accept.

I am. I sent this message to my personal domain from my Yahoo Mail account just now:

  Jun 16 01:46:01 shell postfix/smtpd[29319]: connect from nm4-vm6.bullet.mail.gq1.yahoo.com[98.136.218.165]
  Jun 16 01:46:01 shell postfix/smtpd[29319]: Anonymous TLS connection established from nm4-vm6.bullet.mail.gq1.yahoo.com[98.136.218.165]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
However, it appears that Yahoo's MX did not accept TLS for my outbound reply. That's concerning....
[ Parent | on HN ]