SMTP Downgrade Attacks and MTA-STS

from blog Robert Alexander's Tech Blog, | ↗ original
Running a bunch of mail servers to audit email security
This is a short summary. ↗ Open original to view full content

Related

Attack of the week: Airdrop tracing
A Few Thoughts on Cryptographic Engineering | original ↗
Comcast Shot Themselves in the Foot with MTA-STS
Andrew Ayer - Blog | original ↗
MTA-STS is Hard. Here's how DNS Providers Can Make it Awesome With Automation...
Andrew Ayer - Blog | original ↗
The browsers biggest TLS mistake
benjojo blog | original ↗
Email delivery is stuck on IPv4
benjojo blog | original ↗
HSTS preload adoption and challenges
Robert Alexander's Tech Blog | original ↗
The Path to Email World Domination
Casey Rodarmor's Blog | original ↗
The funny rules of SpamAssassin in 2023 (deep dive)
updown.io | original ↗
The Cost of TLS in Java and Solutions
nickb.dev | original ↗
Introduction to IMAP
nickb.dev | original ↗

More from Robert Alexander's Tech Blog

MTA-STS Preload
11 Nov 2024 | original ↗

Tracking domains that support MTA-STS

Shutting down getlocalcert
5 Nov 2024 | original ↗

The end of an experiment

Is email confidential in transit yet?
4 Nov 2024 | original ↗

Measuring vulnerable SMTP configurations and defenses

TLDs with novel behavior
25 Oct 2024 | original ↗

Thoughts on .internal and gTLDs

One year of getlocalcert.net
11 Jul 2024 | original ↗

Reflecting on a year of running a free domain registration service