On 2022-12-28 at 12:32:39 UTC-0500 (Wed, 28 Dec 2022 12:32:39 -0500)
Greg Troxel <g...@lexort.com>
is rumored to have said:
It would be great if someone(tm) went through the blackhat pdf and
wrote
rules for all the evasions, and fixed the MTAs etc.
From the cited page:
For more technical details, please see our Black Hat USA 2020 talk
(with presentation video) or USENIX security 2020 paper.
Black Hat USA 2020 slides (PDF): You have No Idea Who Sent that Email:
18 Attacks on Email Sender Authentication
USENIX security 2020 paper (PDF): Composition Kills: A Case Study of
Email Sender Authentication
Distinguished Paper Award Winner
In this repo, we summarize all test cases we found and integrate them
into this tool to help administrators and security-practitioners quickly
identify and locate such security issues.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire