So iv been looking in wireshark at SMTP packets sent to gmail and one thing i noticed was the following.
250-mx.google.com at your service, [ipaddress]
250-SIZE 35882577
250-8BITMIME
250-STARTTLS
250 ENHANCEDSTATUSCODES
STARTTLS
220 2.0.0 Ready to start TLS
I wanted to look further into this as it seems even with standard vb.net keyloggers the simple smtp email is sent and google forces the TLS stoping me from easily viewing the information within the packets. So what can i do to get around this? And where can i learn more about the inner workings of this?