[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Sending using my @debian.org in gmail

On 2018-12-01 06:29:44 +0800 (+0800), Paul Wise wrote:
> On Fri, 2018-11-30 at 17:17 -0500, Alexandre Viau wrote:
> > DMARC, SPF and DKIM can be used together prevent almost all
> > scenarios of debian.org email spoofing.
> Which spoofing scenarios are not covered by this combination?

Compromise of the cryptographic keys or primitives in use,
compromise of the authorized MTAs, compromise of the sender's
SMTP submission account, compromise of the sender's MUA/system, and
biggest of all of course is recipients who don't validate SPF/DKIM.
Jeremy Stanley

Attachment: signature.asc
Description: PGP signature

Reply to: