2 ms·

Your claim that yahoo uses a 512bit key are counterfactual. Please adhere to honesty and good faith arguments.

• croemer 2y ago
  I never suggested that Yahoo uses 512bit keys, that's a misunderstanding. The article clearly states that Yahoo is one of the 3 clients that didn't reject 512bit keys the way they should per RFC. Yahoo Mail inbox users are vulnerable _receivers_ of spoofed emails.
  • 1oooqooq 2y ago
    remember when yahoo mail was the first one to implement DKIM validation and then all mailing list owners added a footer telling their subscribers not to use yahoo mail because it was broken, instead of calling their mailing list providers to upload a key? yeah nobody remembers, but yahoo probably do. i doubt they will err on the side of security again.
    • jaza 2y ago
      The Yahoo that built Yahoo Mail no longer exists, so actually they probably don't remember.