惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
人人都是产品经理
人人都是产品经理
爱范儿
爱范儿
aimingoo的专栏
aimingoo的专栏
博客园 - 叶小钗
H
Help Net Security
Microsoft Security Blog
Microsoft Security Blog
The Cloudflare Blog
S
SegmentFault 最新的问题
小众软件
小众软件
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
博客园 - 司徒正美
The GitHub Blog
The GitHub Blog
量子位
H
Hackread – Cybersecurity News, Data Breaches, AI and More
V
V2EX
Martin Fowler
Martin Fowler
博客园 - 【当耐特】
J
Java Code Geeks
D
DataBreaches.Net
云风的 BLOG
云风的 BLOG
F
Fortinet All Blogs
Blog — PlanetScale
Blog — PlanetScale
Last Week in AI
Last Week in AI

dmarc.org

IETF Publishes Updated DMARC Specification – dmarc.org Updated DMARC Statistics Published – dmarc.org Summary of Changes in DMARCbis – dmarc.org DMARC.org at 8th JPAAWG General Meeting – dmarc.org DMARC.org at 7th JPAAWG General Meeting – dmarc.org DMARC.org at Sixth JPAAWG General Meeting – dmarc.org M3AAWG Calls for Coalition to Support Public Suffix List – dmarc.org Microsoft Allows 365 Admins To Accept ARC Forwarders – dmarc.org DMARC.org at Fifth JPAAWG General Meeting – dmarc.org Most DKIM Keys Seen in 2021 Were 2K RSA – dmarc.org
New Authentication Protocol: DKIM2 – dmarc.org
Steve Jones · 2024-11-14 · via dmarc.org

Since late 2021 there has been an increase in the use of DKIM Replay Attacks. While the potential for DKIM Replay Attacks was noted in the original DKIM RFC, bad actors were finally using them in ways that caused real trouble for large mailbox operators.

A number of proposals to address this threat were written up, and several are covered in this presentation from 2022. There was activity in the IETF DKIM Working Group, which had been revived in hopes of finding effective countermeasures, but nothing seemed to gain consensus and the working group went quiet.

But at IETF 121 in Dublin a new an Internet Draft was presented describing a new protocol that incorporated several of the proposals into DKIM, and new additions, being referred to as DKIM2. And this new effort appears to have strong support from Google and Yahoo.

For more details on DKIM2 refer to the Draft linked above, or see the second section of the DMARC.org presentation at the 7th JPAAWG General Meeting.