4 ms·
> If you can redirect the victim to a proxy via DNS poisoning you don’t need this attack you can simply pretend to be the mail server. Not if the client uses S
by jsiepkes 2y ago
> If you can redirect the victim to a proxy via DNS poisoning you don’t need this attack you can simply pretend to be the mail server.
Not if the client uses SMTPS (i.e. SMTP with TLS) on port 587. Which is actually quite common for mail clients.
- dogma1138 2y agoYes but then this attack doesn’t work either, you need a client that is happy with either unencrypted SMTP or one that will attempt opportunistic encryption.