[AusNOG] MS Exchange issues with Telstra

[Mark ZZZ Smith]

I think it is wise to assume the worst when something interferes with the operation of a security mechanism.

Heard about the easiest way to steal a car protected by an alarm? Set it off at 1 am, 2 am and 3 am. The owner will come out and switch it off at that point thinking it is faulty and because it is annoying the neighbours. Now it is a car not protected by an alarm.


----- Original Message -----
From: Eric Pinkerton <Eric.Pinkerton at datacom.com.au>
To: Mark ZZZ Smith <markzzzsmith at yahoo.com.au>; Cameron Worts <cameron at perthwebhosting.net.au>
Cc: "Ausnog at ausnog.net" <ausnog at ausnog.net>
Sent: Thursday, 5 March 2015, 11:00
Subject: RE: [AusNOG] MS Exchange issues with Telstra

I think it's probably a stretch to imply that this problem is indicative that Telstra is knowingly interfering with encryption here.

I'm still interested in the cause here , but it's too early for aluminium millinery.

Cameron, have you tried tethering a laptop to the phone and inspecting the certificates etc?

E

-----Original Message-----
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Mark ZZZ Smith
Sent: 05 March 2015 09:54
To: Geordie Guy; Russell Langton
Cc: Ausnog at ausnog.net
Subject: Re: [AusNOG] MS Exchange issues with Telstra

+1


This query reminded me of this story:

"ISPs Removing Their Customers' Email Encryption"
https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks



I'd find interference with TLS/SSL traffic quite suspicious, as I'd say more often than not it is intentional. The result of any level of interference is the introduction of a man-in-the-middle, breaking end-to-end security.

The only situation I'd find it slightly tolerable is in an enterprise where the enterprise has the right to monitor the use of its own resources. That being said, would enterprises also record all phone calls their staff make and receive using company phones including personal ones, violating phone call privacy? Probably not.
There is past form of Telstra doing dodgy things with mobile Internet traffic :

"Telstra accused of Next G web 'stalking'"
http://www.smh.com.au/digital-life/mobiles/telstra-accused-of-next-g-web-stalking-20120705-21ivs.html


________________________________
From: Geordie Guy <elomis at gmail.com>
To: Russell Langton <russell3901 at gmail.com> 
Cc: "Ausnog at ausnog.net" <ausnog at ausnog.net> 
Sent: Wednesday, 4 March 2015, 18:36
Subject: Re: [AusNOG] MS Exchange issues with Telstra



Can there be a reply to this on-list? I've seen it before and it later mysteriously goes away. It's basically on my list of things I want to understand one day.




On Wed, Mar 4, 2015 at 5:35 PM, Russell Langton <russell3901 at gmail.com> wrote:

Hi Cameron,
>Ive sent you an email.
>On 04/03/2015 5:31 PM, "Cameron Worts" <cameron at perthwebhosting.net.au> wrote:
>
>Guys,
>> 
>>I got a few clients with mobile devices who are with Telstra and can’t connect to our MS exchange server using SSL imap/pop3. I  can confirm that it’s working fine over wifi and using other carriers but not Telstra.  We have tried connecting the same account up on three different iphones – two of them been with Telstra and one with Optus. The mobile using Optus works perfectly whilst the mobiles on the Telstra network does not work. We can get to the owa page fine on all connections.
>> 
>>Before anyone says, Have you contacted Telstra, I can’t as I don’t have any services with Telstra.  
>> 
>>Regards,
>>Cameron 
>> 
>>_______________________________________________
>>AusNOG mailing list
>>AusNOG at lists.ausnog.net
>>http://lists.ausnog.net/mailman/listinfo/ausnog

>>
>>
>_______________________________________________
>AusNOG mailing list
>AusNOG at lists.ausnog.net
>http://lists.ausnog.net/mailman/listinfo/ausnog
>
>


_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

#####################################################################################
Confidentiality and Privilege Notice 
This document is intended solely for the named addressee.  The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.

#####################################################################################