Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #1928

Re: What linux clients do gmail:smtp TLS/SSL

Cross-posted to 3 groups.

Show key headers only | View raw

>>>>> David W Hodgins <dwhodgins@nomail.afraid.org> writes:
>>>>> On Thu, 07 Feb 2013 13:31:57 -0500, <Avoid9Pdf@gmail.com> wrote:

	[Cross-posting to news:comp.internet.services.google.]

	FWIW, I use Gnus/Emacs on my GNU/Linux system for both Usenet
	and email, including sending via Google Mail's :587 (RFC 6409.)
	My guess is that both Alpine and Mutt are capable of securely
	interfacing Google Mail, too.

 >> smtp is rather simple, but what's all this TLS/SSL about ?

 > smtps is an smtp session encrypted with an ssl key, similar to
 > https.  Similar for pop3s

	Not quite.  ESMTPS, as used by Google Mail's :587, begins just
	like a plain SMTP session, which then proceeds to EHLO (thus
	becoming ESMTP), and STARTTLS, which finally enables TLS/SSL.

	Consider, for instance, the following example session:

$ gnutls-cli --starttls --port=submission -- smtp.gmail.com 
|<1>| Note that the security level of the Diffie-Hellman key exchange has been lowered to 512 bits and this may allow decryption of the session data
Processed 152 CA certificate(s).
Resolving 'smtp.gmail.com'...
Connecting to '2a00:1450:4010:c04::6d:587'...

- Simple Client Mode:

220 mx.google.com ESMTP pz15sm16403877lab.3 - gsmtp
EHLO MX.EXAMPLE.NET 
250-mx.google.com at your service, [2XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX]
250-SIZE 35882577
250-8BITMIME
250-STARTTLS
250 ENHANCEDSTATUSCODES
STARTTLS 
220 2.0.0 Ready to start TLS

	[There, one sends EOF (C-d) for gnutls-cli(1) to start TLS.]

*** Starting TLS handshake
- Peer's certificate is trusted
- The hostname in the certificate matches 'smtp.gmail.com'.
- Session ID: 28:0B:94:74:7F:4A:5D:B7:72:DA:C6:EA:50:63:B8:6B:B9:C7:F7:02:61:60:8B:0E:81:63:45:CE:24:31:9C:30
...

 >> http: gmail is becoming unbearable, even with `links`.

 > Gmail's implementation of imap is rather broken.

	Could you please elaborate on that?  I never had an issue with
	it (though I wasn't pushing IMAP to the extremes.)

 > I use a pop3 connection, to get/send email with my gmail account.

	Last time I've checked (which was probably c. 2002) POP3 had
	multiple issues, including that should the connection be lost
	during the session, there was no easy way /not/ to download the
	messages already received for a second time.  (Which was a major
	inconvenience for dial-up Internet users back in the day.)

	Ultimately, however, IMAP allows for rather comprehensive set of
	mailbox operations, to the point that one may even think of IMAP
	as of a generic "file transfer protocol."  Which, in particular,
	makes two-way synchronization possible.

[...]

-- 
FSF associate member #7257

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

What linux clients do gmail:smtp TLS/SSL Avoid9Pdf@gmail.com - 2013-02-07 18:31 +0000
  Re: What linux clients do gmail:smtp TLS/SSL "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2013-02-07 14:59 -0500
    Re: What linux clients do gmail:smtp TLS/SSL Ivan Shmakov <oneingray@gmail.com> - 2013-02-08 09:48 +0000
      Re: What linux clients do gmail:smtp TLS/SSL Avoid9Pdf@gmail.com - 2013-02-08 13:42 +0000
        Re: What linux clients do gmail:smtp TLS/SSL Ivan Shmakov <oneingray@gmail.com> - 2013-02-08 21:32 +0000
        Re: What linux clients do gmail:smtp TLS/SSL Whiskers <catwheezel@operamail.com> - 2013-02-08 22:13 +0000
          Re: What linux clients do gmail:smtp TLS/SSL Ivan Shmakov <oneingray@gmail.com> - 2013-02-09 06:51 +0000
    Re: What linux clients do gmail:smtp TLS/SSL David Brown <david@westcontrol.removethisbit.com> - 2013-02-08 11:25 +0100
  Re: What linux clients do gmail:smtp TLS/SSL David Brown <david@westcontrol.removethisbit.com> - 2013-02-08 11:20 +0100
  Re: What linux clients do gmail:smtp TLS/SSL Whiskers <catwheezel@operamail.com> - 2013-02-08 21:54 +0000
    Re: What linux clients do gmail:smtp TLS/SSL Unknown <dog@gmail.com> - 2013-02-09 07:55 +0000
      TLS/SSL Ivan Shmakov <oneingray@gmail.com> - 2013-02-09 09:22 +0000
      Re: What linux clients do gmail:smtp TLS/SSL J G Miller <miller@yoyo.ORG> - 2013-02-09 15:14 +0000
  Re: What linux clients do gmail:smtp TLS/SSL Denis McMahon <denismfmcmahon@gmail.com> - 2013-02-10 13:18 +0000
    Re: What linux clients do gmail:smtp TLS/SSL telsar <noone@nowhere.com> - 2013-02-11 12:50 -0600

csiph-web