In article <66d513ca-f33d-748b-e394-bceb6e1da...@spamtrap.tnetconsulting.net> 
you write:
>-=-=-=-=-=-
>
>On 05/15/2018 08:15 AM, Kurt Andersen wrote:
>> Manipulating MIME structures in email messages to expose the encrypted 
>> content: https://efail.de/
>
>DKIM will not help protect against #Efail.
>
>Efail works by copying ciphertext into a new message and arranging for 
>the client to decrypt it.  Said new message is devoid of any association 
>with DKIM.

I suppose, for the 10 seconds from the time the message is created
until the attacker's MTA signs it on the way out.  The bad guy can put
a return address he controls on the malicious message and make the
whole thing DMARC compliant.

R's,
John

_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to