Got a new Galaxy S4 recently, set it up with my postfix email server. I've noticed in the server logs that the phone doesn't appear to be using any sort of key exchange algorithm:
Code:
Mar 25 21:20:16 pLAN9-Server2 postfix/submission/smtpd[16636]: connect from 26.sub-70-210-5.myvzw.com[70.210.5.26]
Mar 25 21:20:16 pLAN9-Server2 postfix/submission/smtpd[16636]: Anonymous TLS connection established from 26.sub-70-210-5.myvzw.com[70.210.5.26]: TLSv1 with cipher AES128-SHA (128/128 bits)
Mar 25 21:20:20 pLAN9-Server2 postfix/submission/smtpd[16636]: 4E2C96003D: client=26.sub-70-210-5.myvzw.com[70.210.5.26], sasl_method=PLAIN, sasl_username=admin@x.com
Mar 25 21:20:20 pLAN9-Server2 postfix/cleanup[16625]: 4E2C96003D: message-id=<x@email.android.com>
Mar 25 21:20:20 pLAN9-Server2 postfix/qmgr[12927]: 4E2C96003D: from=<admin@x.com>, size=1028, nrcpt=1 (queue active)
Mar 25 21:20:20 pLAN9-Server2 postfix/virtual[16628]: 4E2C96003D: to=<admin@x.com>, relay=virtual, delay=0.74, delays=0.72/0.01/0/0.01, dsn=2.0.0, status=sent (delivered to maildir)
Mar 25 21:20:20 pLAN9-Server2 postfix/qmgr[12927]: 4E2C96003D: removed
the bit i'm referring to is bolded/italicized. Typically that cipher suite reads "TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)" or something thereabouts. So is the phone exchanging the key in clear text?
