full-disclosure - Implications of outsourcing email

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.44.0312082348270.15701-100000@mailbox.prolocation.net>
From: raymond at prolocation.net (Raymond Dijkxhoorn)
Subject: Implications of outsourcing email

Hi!

> > But they could provide some legit forward DNS pointers so it LOOKS 
> > legit. Thats not too much asked isnt it ? 
> 
> Forward pointers, or PTR pointers?  And you'll note that "provide pointers
> so it looks legit" is a *lot* different than "funnel through the mail server".

If you make let them make the forward, in most of the cases a mail 
provider can put in the reverse. 

> And again, it's still a bootstrapping problem.  But if anybody cares, go
> read up on the proposals over in the ASRG list.  Archives are at
> https://www1.ietf.org/mail-archive/working-groups/asrg/

Thanks,
Raymond.