3 ms·
Yeah nice work. However not giving a large well established OSS project such as Postfix a notice upfront is not really a classy move. > As part of a non-respo
by jsiepkes 3y ago
Yeah nice work.
However not giving a large well established OSS project such as Postfix a notice upfront is not really a classy move.
> As part of a non-responsible disclosure process, SEC Consult has
published an email spoofing attack that involves a composition of
email services with specific differences in the way they handle
line endings other than <CR><LF>.
https://www.mail-archive.com/postfix-announce@postfix.org/msg00090.html https://www.mail-archive.com/postfix-announce@postfix.org/ms...