[imp] Fwd: E-mail address spoofing with RLO

[lst_hoe02 at kwsoft.de]

Zitat von ANANT S ATHAVALE <asa at isac.gov.in>:

> Dear List,
>
> Can anybody confirm, IMP is not affected by this?
>
> -ANANT.
>
>     Date: Tue, 24 May 2011 18:58:19 +0200
>     From: Wouter Coekaerts <wouter at coekaerts.be>
>  Subject: E-mail address spoofing with RLO
>       To: bugtraq at securityfocus.com, full-disclosure at lists.grok.org.uk
>
> E-mail address spoofing with RLO - http://wouter.coekaerts.be/2011/email-rlo

E-Mail address spoofing is always possible as long as you don't use  
some digital signature like S/MIME or PGP. If you use RLO or some  
other tricks doesn't really matter.

Regards

Andreas



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6046 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.horde.org/archives/imp/attachments/20110526/1ff205b1/attachment-0001.bin>