惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
博客园_首页
大猫的无限游戏
大猫的无限游戏
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Apple Machine Learning Research
Apple Machine Learning Research
B
Blog
B
Blog RSS Feed
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
P
Proofpoint News Feed
MyScale Blog
MyScale Blog
Engineering at Meta
Engineering at Meta
量子位
H
Hackread – Cybersecurity News, Data Breaches, AI and More
T
Tailwind CSS Blog
Stack Overflow Blog
Stack Overflow Blog
N
Netflix TechBlog - Medium
T
The Blog of Author Tim Ferriss
U
Unit 42
aimingoo的专栏
aimingoo的专栏
博客园 - 叶小钗
博客园 - 【当耐特】
云风的 BLOG
云风的 BLOG
博客园 - Franky
博客园 - 聂微东

dmarc.org

IETF Publishes Updated DMARC Specification – dmarc.org Updated DMARC Statistics Published – dmarc.org Summary of Changes in DMARCbis – dmarc.org DMARC.org at 8th JPAAWG General Meeting – dmarc.org DMARC.org at 7th JPAAWG General Meeting – dmarc.org DMARC.org at Sixth JPAAWG General Meeting – dmarc.org M3AAWG Calls for Coalition to Support Public Suffix List – dmarc.org Microsoft Allows 365 Admins To Accept ARC Forwarders – dmarc.org DMARC.org at Fifth JPAAWG General Meeting – dmarc.org Most DKIM Keys Seen in 2021 Were 2K RSA – dmarc.org
New Authentication Protocol: DKIM2 – dmarc.org
Steve Jones · 2024-11-14 · via dmarc.org

Since late 2021 there has been an increase in the use of DKIM Replay Attacks. While the potential for DKIM Replay Attacks was noted in the original DKIM RFC, bad actors were finally using them in ways that caused real trouble for large mailbox operators.

A number of proposals to address this threat were written up, and several are covered in this presentation from 2022. There was activity in the IETF DKIM Working Group, which had been revived in hopes of finding effective countermeasures, but nothing seemed to gain consensus and the working group went quiet.

But at IETF 121 in Dublin a new an Internet Draft was presented describing a new protocol that incorporated several of the proposals into DKIM, and new additions, being referred to as DKIM2. And this new effort appears to have strong support from Google and Yahoo.

For more details on DKIM2 refer to the Draft linked above, or see the second section of the DMARC.org presentation at the 7th JPAAWG General Meeting.