2 ms·
The phishing mail spoofed support@protonmail.ch, which should have been caught by SPF and DMARC. And protonmail-to-protonmail should be E2E encrypted and authe
by panarky 7y ago
The phishing mail spoofed support@protonmail.ch, which should have been caught by SPF and DMARC.
And protonmail-to-protonmail should be E2E encrypted and authenticated.
Many unanswered questions here about how this got past ProtonMail to users.
- stebann 7y agoNice observation. Maybe the vulnerability might be related to spoofing SPF and other security mechanism? They should be fixing this by now.