惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

V
Visual Studio Blog
Microsoft Azure Blog
Microsoft Azure Blog
WordPress大学
WordPress大学
小众软件
小众软件
Last Week in AI
Last Week in AI
月光博客
月光博客
博客园 - 聂微东
Recent Announcements
Recent Announcements
A
About on SuperTechFans
博客园 - 三生石上(FineUI控件)
V
V2EX
阮一峰的网络日志
阮一峰的网络日志
博客园 - Franky
云风的 BLOG
云风的 BLOG
量子位
N
Netflix TechBlog - Medium
Hugging Face - Blog
Hugging Face - Blog
H
Hackread – Cybersecurity News, Data Breaches, AI and More
J
Java Code Geeks
博客园 - 司徒正美
S
SegmentFault 最新的问题
有赞技术团队
有赞技术团队
Google DeepMind News
Google DeepMind News
宝玉的分享
宝玉的分享

dmarc.org

IETF Publishes Updated DMARC Specification – dmarc.org Updated DMARC Statistics Published – dmarc.org Summary of Changes in DMARCbis – dmarc.org DMARC.org at 8th JPAAWG General Meeting – dmarc.org DMARC.org at 7th JPAAWG General Meeting – dmarc.org DMARC.org at Sixth JPAAWG General Meeting – dmarc.org M3AAWG Calls for Coalition to Support Public Suffix List – dmarc.org Microsoft Allows 365 Admins To Accept ARC Forwarders – dmarc.org DMARC.org at Fifth JPAAWG General Meeting – dmarc.org Most DKIM Keys Seen in 2021 Were 2K RSA – dmarc.org
New Authentication Protocol: DKIM2 – dmarc.org
Steve Jones · 2024-11-14 · via dmarc.org

Since late 2021 there has been an increase in the use of DKIM Replay Attacks. While the potential for DKIM Replay Attacks was noted in the original DKIM RFC, bad actors were finally using them in ways that caused real trouble for large mailbox operators.

A number of proposals to address this threat were written up, and several are covered in this presentation from 2022. There was activity in the IETF DKIM Working Group, which had been revived in hopes of finding effective countermeasures, but nothing seemed to gain consensus and the working group went quiet.

But at IETF 121 in Dublin a new an Internet Draft was presented describing a new protocol that incorporated several of the proposals into DKIM, and new additions, being referred to as DKIM2. And this new effort appears to have strong support from Google and Yahoo.

For more details on DKIM2 refer to the Draft linked above, or see the second section of the DMARC.org presentation at the 7th JPAAWG General Meeting.