Fw: Re: IMAP STARTTLS sniff tool

["Bob Ezrin" <bezrin () gmx com>]

Hi all,
we solved the problem with https://github.com/ipopov/starttls-mitm.

B.
----- Original Message -----
From: Bob Ezrin
Sent: 03/07/14 10:07 AM
To: oss-security () lists openwall com
Subject: Re: [oss-security] IMAP STARTTLS sniff tool

Many thanks, I will try it!!!

B.
----- Original Message -----
From: Solar Designer
Sent: 03/07/14 09:56 AM
To: oss-security () lists openwall com
Subject: Re: [oss-security] IMAP STARTTLS sniff tool

Hi, On Fri, Mar 07, 2014 at 09:37:01AM +0100, Bob Ezrin wrote: > Hi all. We managed succesfully to sniff inside POP3S, 
SMTPS, IMAPS & HTTPS tunnels using arpspoof, iptables & sslsplit to make MITM. Now we want to sniff inside STARTTLS 
tunnels (specifically IMAP) but unfortunately sslsplit doesn't supports STARTTLS. Is there/do you know another SSL/TLS 
tool supporting IMAP over STARTTLS to make MITM? Many thanks B. Sorry for not addressing your (mostly off-topic) 
question directly (I don't know the answer), but it got me wondering what the most appropriate mailing list would be 
for this sort of topics. We mostly haven't been using the oss-security list for such topics so far, and it is unclear 
whether such broader scope is desirable or not. In part, this might depend on whether there exists a more suitable list 
or not. I'd think that maybe the Penetration Testing list could be it: 
http://www.securityfocus.com/archive/101/description http://seclists.org/pen-test/ but it appears rather inactive 
lately. Yet I think it's worth posting the question in there, at least to see if the list is currently usable (would 
anyone reply?) Bob, can you try that? Opinions? Alexander