4 ms·
Isn't this still a draft? Also, it does not fix MX record spoofing, only downgrade attacks IIRC? EDIT: Just reviewed the draft, seems like it addresses MX spoo
by totony 11y ago
Isn't this still a draft? Also, it does not fix MX record spoofing, only downgrade attacks IIRC?
EDIT: Just reviewed the draft, seems like it addresses MX spoofing, but it seems to do it either via HTTPS or DNSSEC, so DNSSEC seems to be used by it
- tptacek 11y agoWhat does "still a draft" mean? That a bunch of randos at IETF haven't approved it yet? Three of the most important email providers on the planet sponsored it. It's what's going to happen.
- totony 11y agoIt means it's not implemented in most SMTP clients/SMTP servers. The randos have a huge impact. Not everyone uses Gmail/Outlook