[Mimedefang] sendmail spf milter plugin for sendmail 8.13.0

David F. Skoll dfs at roaringpenguin.com
Wed Aug 18 08:39:53 EDT 2004


On Tue, 17 Aug 2004, Jeff Rife wrote:

> > http://www.sendmail.net/dk-milter/

> Oh, yuck.  Sorry for the long rant, but...

[Long rant deleted]

Furthermore, DomainKeys is trivially defeated with a replay attack.
Send yourself the spam through the signing server.  Now you have a signed
spam that you can re-mail far and wide.  Of course, you can't mutate it,
which might increase the effectiveness of DCC and the like, but it still
means you can't *really* trust a properly-signed message.

--
David.



More information about the MIMEDefang mailing list