News for hackers. Stuff that matters.

freddieleeman

Re: on Monday September 16, 2024 @06:04AM (#41554492)
GoDaddy's DMARC reports are passing SPF even when the RFC5321.MailFrom and RFC5322.From domains aren't aligned.
Re:LearnDMARC now supports multiple DKIM signatures on Tuesday February 06, 2024 @11:54AM (#39276800)
Clickable link: https://learnDMARC.com

LearnDMARC now supports multiple DKIM signatures

The latest update to everyone's favorite DMARC learning and testing tool brings an exciting enhancement: the support for multiple DKIM signatures. Now, users can view all DKIM signatures along with their respective algorithms and authentication results, enhancing the tool's comprehensiveness and utility.Have fun: learnDMARC.comPlease feel free to share it. Hopefully, this will increase DMARC...

( Read More... | 1 comment | on HN )
Re:MTA-STS Adoption Among the Top 1M Domains in 2024 on Monday January 15, 2024 @04:00AM (#38998730)
Just 0.3% of domains implemented an MTA-STS TXT record. 571 (19.5%) of these domains have implementation errors (see complete list below). Among the valid MTA-STS implementations, 54.3% publish an 'enforce' policy, while 45% have opted for a 'testing' policy. In summary, 1278 domains leverage MTA-STS to fortify their defenses against Man-in-the-Middle (MitM) downgrade attacks.
Re:DMARC required by Gmail and Yahoo from Feb 2024 on Monday January 15, 2024 @03:53AM (#38998697)
https://datatracker.ietf.org/doc/html/rfc7489#section-6.6.4

"If email is subject to the DMARC policy of "reject", the Mail Receiver SHOULD reject the message (see Section 10.3). If the email is not subject to the "reject" policy (due to the "pct" tag), the Mail Receiver SHOULD treat the email as though the "quarantine" policy applies. This behavior allows Domain Owners to experiment with progressively stronger policies without relaxing existing policy."

Re:DMARC required by Gmail and Yahoo from Feb 2024 on Wednesday January 10, 2024 @04:20AM (#38938097)
https://URIports.com/dmarc offers services starting at just $1 monthly for up to 3 domains. It's GDPR compliant and includes features like notifications, hosted MTA-STS for protection against Man-in-the-Middle (MiTM) downgrade attacks, and much more.
Re:DMARC required by Gmail and Yahoo from Feb 2024 on Wednesday January 10, 2024 @02:36AM (#38937310)
For those interested in testing their email for SPF, DKIM, and DMARC compliance or eager to learn about these mechanisms that enhance email security and prevent spoofing, check out https://learnDMARC.com. This is a site I developed to promote adoption and share knowledge. It includes a challenging quiz, tough even for professionals. I'd be keen to know your scores on the first attempt – honesty counts!
Re:Learn and Test DMARC on Monday October 02, 2023 @05:43AM (#37735977)
You will need Verified Mark Certificates (VMC's) issued by a Certificate Authority.
Re:Learn and Test DMARC on Monday October 02, 2023 @03:42AM (#37735026)
As DMARC relies on the RFC5322.From address, omitting it will lead to errors. To avoid these errors, emails lacking this address are currently being ignored.
Re:Email Authentication: A Developer's Guide on Saturday August 26, 2023 @09:15AM (#37272596)
Totally agree, this blog makes no sense at all.

"If a server isn't on the list, it's like an application being tossed out because it wasn't fully filled or the business idea is illegal."

Seriously, what?!

"DMARC establishes your policy as a sender for what should happen to your messages if they fail DKIM or SPF."

... only if they fail DKIM AND SPF (and alignment). The whole blog doesn't even talk about identifier alignment, which is a big part of DMARC.

Maybe an AI wrote the article and got stuck trying to use a weird analogy about a "competitive accelerator program" for email security? :)

Re:Tell HN: Make sure to configure DKIM/SPF with Fastmail on Tuesday March 29, 2022 @08:19AM (#30841549)
A spoofed message should FAIL DMARC. It could PASS DKIM and if the signature came from a domain that is owned by the attacker. But DMARC will fail when the DKIM domain and the HEADER.FROM domain do not align.

Please read my blog here: https://www.uriports.com/blog/introduction-to-spf-dkim-and-d...

It will explain how SPF, DKIM, and DMARC work together to prevent spam.

Re:See how DMARC, SPF, and DKIM work interactively on Monday January 10, 2022 @12:42PM (#29878466)
Please share your email details with [email protected] and we'll have a look to see what is going wrong.
Re:See how DMARC, SPF, and DKIM work interactively on Monday January 10, 2022 @12:42PM (#29878460)
Please share your email details with [email protected] and we'll have a look to see what is going wrong.
Re:See how DMARC, SPF, and DKIM work interactively on Monday January 10, 2022 @04:23AM (#29872281)
Have a look at https://URIports.com/dmarc ; while it is subscription-based, it is not expensive and starts at just $12/year.
Re:See how DMARC, SPF, and DKIM work interactively on Monday January 10, 2022 @03:33AM (#29871953)
Thanks, appreciate it!
Re:See how DMARC, SPF, and DKIM work interactively on Monday January 10, 2022 @03:33AM (#29871946)
It is actually custom build
Re:See how DMARC, SPF, and DKIM work interactively on Monday January 10, 2022 @03:30AM (#29871933)
You can also use https://DMARCtester.com