Article View: comp.security.misc
Article #440Re: SMTP SECURITY: A new (?) idea
From: Alan J Rosenthal
Date: Fri, 21 Aug 1992 18:42
Date: Fri, 21 Aug 1992 18:42
13 lines
1189 bytes
1189 bytes
>>>Why not implement SMTP allowing only connections from PRIVILEGED ports. > >A better solution can be to accept SMTP connections only from trusted >hosts (and maybe limiting to a specified port too). Mail should be >bubbled like name server queries are bubbled through the net. Um, how does this help? If you allow only connections from trusted hosts, but you allow them to feed you mail that they got from hosts you don't trust, why don't you just let those untrusted hosts feed you mail directly? Or if you assume that those hosts will be trusted by that machine you trust, how do you go about setting up a sufficiently large network of these hosts that you can talk to more than a few sites out there? Why is this any easier of a task than changing the sendmail protocol?
Technical Details
Message-ID:
<1992Aug21.144227.22167@jarvis.csri.toronto.edu>Path:
arc1-ca.pugleaf.net!sparky!uunet!utcsri!dgp.toronto.edu!flapsReferences:
<1992Aug13.121416.7078@csd.uch.gr> <1992Aug13.102249.16853@jarvis.csri.toronto.edu> <4116@bimacs.BITNET>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!utcsri!dgp.toronto.edu!flaps Newsgroups: comp.security.misc From: flaps@dgp.toronto.edu (Alan J Rosenthal) Subject: Re: SMTP SECURITY: A new (?) idea Message-ID: <1992Aug21.144227.22167@jarvis.csri.toronto.edu> References: <1992Aug13.121416.7078@csd.uch.gr> <1992Aug13.102249.16853@jarvis.csri.toronto.edu> <4116@bimacs.BITNET> Date: 21 Aug 92 18:42:27 GMT Lines: 13