Thu April 11

Discuss email and messaging protocols, using examples that you have explored using wireshark.

• SMTP protocol Explained (How Email works?)
• why you may not want to run your own email server
• XMPP - an open messaging protcol (i.e. jabber)
• VOIP - voice over IP
• SMS_gateway

Can we send email with just telnet (or ncat or similar tool) ... if we can find the right gateway.

Note that phones are not a TCP/IP network ... nor is SMS (short message service), though there are some gateways ... such as when your iphone tries to use a wifi connection for a phone call. These services are typicall company-based (apple, google) using proprietary systems.

TLS - transport layer security

How does all this encryption stuff work anyway?

Things to understand

• symmetric key encryption : fast, same secret on both ends
• asymmetric key encryption (i.e. public/private) : signing and authentication
• cryptographic hash : message integrity
• certificates : who says so?
• lots of variations ... but the central ideas are consistent

And then there's the (much) larger internet security topic ...

• blue team

For Tuesday

End of term project(s) ...

aside

Gmail making email more secure with MTA-STS standard (yesterday ...) | hackernews discussion

other stuff to play with ...

• nmap "security product of the year"
• ncat