3 ms·
I think DKIM/SPF resolves that. The recipient (spf) or the sender (DKIM) of the email decides what servers are allowed to send out mail for a domain.
by bitJericho 12y ago
I think DKIM/SPF resolves that. The recipient (spf) or the sender (DKIM) of the email decides what servers are allowed to send out mail for a domain.
- capnrefsmmat 12y agoThat doesn't stop a MITM impersonating the recipient of the message; it just stops someone impersonating the sender.
- nly 12y agoIt doesn't even stop that, since we're talking about a MITM between a legitimate sender and receiver.
- bitJericho 12y agoWell I guess you'd know about the MITM after the attack, since the email could get rejected if it comes from a bad IP. But yes you guys are absolutely right. PGP ftw?