3 ms·
Completely wrong, dont just munge someone's email and hope it wont work, we literally have domains for this kind of stuff. https://www.iana.org/domains/reserved
by hobs 7y ago
Completely wrong, dont just munge someone's email and hope it wont work, we literally have domains for this kind of stuff.
https://www.iana.org/domains/reserved https://www.iana.org/domains/reserved
- gruez 7y agoChances of com1000 being delegated is low.
- thanksforfish 7y agoWhy would it need to be designed? Email delivery depends on DNS, which is unencrypted and spoofable. Spoofing emails is also doable.
- loopdoend 7y agoIf the dns lookup on a com1000 domain fails, the email won’t go anywhere.
- thanksforfish 7y agoCorrect. But if a DNS response for that domain is spoofed. It will. DNS is a very old protocol that still has lots of problems and mitigations like DNSSEC are only partially deployed.
- gruez 7y agoEmail is an inherently insecure medium. If an attacker can compromise the DNS responses for your mail server, you're hosed.