Article View: comp.security.misc
Article #285Re: Fake headers on Internet mail
From: Perry E. Metzger
Date: Thu, 13 Aug 1992 14:55
Date: Thu, 13 Aug 1992 14:55
20 lines
1123 bytes
1123 bytes
sherer@lub001.lamar.edu writes: >My question is, is there a way to masquerade as someone else in >e-mail? Its trivial; see the RFC for SMTP; all you have to do is pretend to be another SMTP daemon; there is no authentication mechanism. Its all ASCII; you can even do it yourself without writing any software by connecting to the mailer daemon's port ant typing away. >If so, is there anything I can do to prevent this from happening? Not really, no. Eventually, everyone will be using public key cryptography to sign their mail, but for the moment, there is no way to really authenticate SMTP. -- Perry Metzger pmetzger@shearson.com -- Just say "NO!" to death and taxes. Extropian and Proud.
Technical Details
Message-ID:
<1992Aug13.145519.19608@shearson.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!shearson.com!snark!pmetzgerReferences:
<1992Aug12.151404.1424@lub001.lamar.edu>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!shearson.com!snark!pmetzger From: pmetzger@snark.shearson.com (Perry E. Metzger) Subject: Re: Fake headers on Internet mail Message-ID: <1992Aug13.145519.19608@shearson.com> Sender: news@shearson.com (News) Organization: Lehman Brothers References: <1992Aug12.151404.1424@lub001.lamar.edu> Date: Thu, 13 Aug 1992 14:55:19 GMT Lines: 20