5 ms·
This feels like an implementation mistake by MS and G, not any kind of inherent design flaw (the latter being strongly implied by the article). It's a problem,
by gumby 3y ago
This feels like an implementation mistake by MS and G, not any kind of inherent design flaw (the latter being strongly implied by the article).
It's a problem, and I'm glad it was explored, but c'mon.
- dsr_ 3y agoThe inherent design flaw is that announcing via SPF "Oh, yes, and Google is allowed to forge email on my behalf" allows Google to forge email on your behalf. All else follows. The enemy of security is convenience, and it's very convenient to hand over mail to Microsoft, Google, etc.