TLS 1.0 is used for mail transport
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 9.2k
- Forks
- 1.3k
- Avg merge
- 12h 58m
- Merged PRs (30d)
- 56
Description
This is the header of a mail coming from notify@keybase.io:
Received: from a8-237.smtp-out.amazonses.com ([54.240.8.237])
by xxx.xxx.xx with esmtps (TLS1.0:ECDHE_RSA_AES_128_CBC_SHA1:128)
It would be nice if you could switch to TLS 1.2 for smtp transport encryption as TLS 1.0 is slowly being replaced by TLS 1.2 everywhere due to possible problems with TLS 1.0.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The report names no source file, test, or entry point; it only includes a received-mail header showing TLS 1.0 for SMTP transport. Start by locating the SMTP transport configuration and its TLS-version handling; done means the transport uses TLS 1.2 instead of TLS 1.0 and the relevant verification passes.
Written by the indexing model from the issue text.
Assessment
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100