News for hackers. Stuff that matters.

A comment on Clinton ran own computer system for her official emails. Parent comment

Re:Clinton ran own computer system for her official emails by lisper on Wednesday March 04, 2015 @12:26PM (#9145800)
Find me someone in the State Department willing to be the recipient and I will happily conduct this experiment. Why do you think it would be any harder to spoof an email to the State Dept than anywhere else?
[ Parent | on HN ]
Re:Clinton ran own computer system for her official emails by ______1 on Wednesday March 04, 2015 @01:26PM (#9146244)
http://en.wikipedia.org/wiki/Sender_Policy_Framework
[ Parent | on HN ]
Re:Clinton ran own computer system for her official emails by rsanders on Wednesday March 04, 2015 @02:43PM (#9146812)
http://mxtoolbox.com/SuperTool.aspx?action=spf%3astate.gov&r....

"No SPF records found"

Looks pretty spoofable.

[ Parent | on HN ]
Re:Clinton ran own computer system for her official emails by lisper on Wednesday March 04, 2015 @02:34PM (#9146730)
SPF only validates the envelope, not the From header. To do that you need DKIM, and I'd be surprised if Dept of State has implemented that.
[ Parent | on HN ]