Re: [Imap-protocol] Is OpenEmailSurvey open to share method or code?

On 24 Mar 2015, at 08:26, Bron Gondwana <[email protected]> wrote:
> 
> On Tue, Mar 24, 2015, at 10:10 AM, Gilles LAMIRAL wrote:
>> At that time, 2008, I got around 0.24% of all hosts with port 143 open
>> on imap while OpenEmailSurvey scored 0.1% in 2013. It looks like Gmail and Big
>> cloud webmails have stolen half of the imap market share.
> 
> I wonder how many sites there are where you just can't tell anyway.
> 
> FastMail doesn't even listen on port 143, because it leaks cleartext passwords to active attackers:
> 
> https://www.fastmail.com/help/technical/ssltlsstarttls.html

openemailsurvey.org main page results contains both 143 + 993 results deduplicated. There are actually also pages for them separately:

http://openemailsurvey.org/imap-143.html
http://openemailsurvey.org/imap-993.html

The 993 port page is before the nicer stats, but I think still from the same year's results.

> And even once you try port 993:
> 
> * OK IMAP4 ready
> . CAPABILITY
> * CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID ENABLE UIDPLUS SASL-IR AUTH=PLAIN
> . OK completed
> 
> You're talking to nginx.  It's only once you log in that you see what's really there:

Yeah, that's a limitation. But it's still detecting nginx and according to last year's scan there were 0,06% nginx proxies so it doesn't change the results much.

_______________________________________________
Imap-protocol mailing list
[email protected]
http://mailman13.u.washington.edu/mailman/listinfo/imap-protocol