Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy · HackerPapers discussions

Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy — mentioned by rst

Mon, 02 Oct 2023 11:42:10 GMT

As a practical example -- it's pretty common for companies to delegate email to a provider like Gmail. Some infosec folks consider this best practice, and Google will allow you to configure DMARC to say that only messages originating from their servers are legit. However, this does mean that anyone who can suborn Google's mail servers can use them to spend spoof emails that DMARC will rate as legitimate -- and last month, there was announcement of vulnerabilities (since fixed) which allowed a third party to abuse email-forwarding features to do exactly that. See…

Paper and discussion history. A mention is not an endorsement.

Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy — HN submission

Fri, 08 Sep 2023 21:06:36 GMT

Forward Pass: On the Security Implications of Email Forwarding Mechanism

3 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy — mentioned by rediguanayum

Fri, 08 Sep 2023 20:49:39 GMT

Paper in question: https://arxiv.org/pdf/2302.07287.pdf. Apparently won the Euro Privacy and Privacy best paper. It publishes and draw attention to what in industry has been "known" lore about SPF and ARC vulnerabilities. Kudos to the authors.

Paper and discussion history. A mention is not an endorsement.

Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy — mentioned by comboy

Fri, 08 Sep 2023 20:46:46 GMT

http://web.archive.org/web/20230905131755/https://arxiv.org/... Page 9 gives you an idea

Paper and discussion history. A mention is not an endorsement.

Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy — HN submission

Tue, 05 Sep 2023 17:49:37 GMT

Forward Pass: On the Security Implications of Email Forwarding Mechanism Policy

1 point; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy — HN submission

Sun, 19 Feb 2023 20:36:17 GMT

Forward Pass: The Security Implications of Email Forwarding Mechanism and Policy

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.