[Discuss] Temporarily disable check for messages in Thunderbird
R. McFarlane
techie at mcfarlanecomputing.net
Fri Nov 3 11:13:26 PST 2006
stephen hawkes wrote:
> What blows my mind is how much money these companies make and why they
> don't just buy some frigging ssl certs. Heck get some self signed ones
> for all I care.
>
> I had a discussion with someone I know that was a shaw tech locally
> (since moved to calgary) about the poor encryption on their webmail and
> lack of it on their pop access. The excuse for 64bit ssl on the webmail
> was so that you can access your email from any country, since higher
> encryption might not be usable. I know there are laws about exporting
> products with certain levels of encryption from the US (so IE would be
> affected maybe?), but I'm pretty sure I could find a web browser that
> would work in any country. Heck they could do the same thing as uvic
> webmail and let you choose between encrypted or not.
>
> The excuse for not having any ecryption on their pop server was that you
> connect through your shaw modem which goes "directly" to the shaw
> server. I brought up wireless connections, as many people have wireless
> at home now. His reply: Use wep or wpa. Well not all people know how to
> set that up (judging by the amount of open APs around me right now) and
> wep is trivial to break.
>
> Anyhow, from his responses it seemed like they had replies ready (even
> if they are poor ones) and don't really care to do anything about it. I
> guess they have few enough problems that the cost isn't justified.
Well then, one day maybe someone should capture packets, break the
encryption and then send a complete how-to video to the local news agencies.
Their so called "security" through cable modem is a joke. It might be
different now with the newer "modems", but when I had cable internet it
was *really* easy to access file shares on other computers through the
shaw network!
SSL/TLS support for mail access is not hard to do nor expensive!
--
www.mcfarlanecomputing.net
More information about the Discuss
mailing list