Login

Recent searches

No recent searches

Search options

Not available on mastodon.xyz.
mastodon.xyz is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance, open to everyone, but mainly English and French speaking.

Administered by:

Server stats:

824
active users

mastodon.xyz: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.4

#whatever

2 posts2 participants0 posts today
Replied in thread
Public *
Erik van Straten

@grumpybozo : I definitely am not angry with you (I very much agree).

Unfortunately many admins treat security solutions like they're a religion.

Some time age there was a hefty debate on a Dutch "mostly admins" site (tweakers.net, I'd have to look up the exact thread) about the "correct" sending and receiving MTA configurations. There was no agreement.

Microsoft even used to ignore SPF/DKIM/DMARC if the sender was in the "safe senders" list (which the user's address book defaults to). What could possibly go wrong (later MS corrected that).

The screenshot below is from part of security.nl/posting/766069/DMA (I wrote that Sept. 14, 2022).

Edited 23:36 UTC to add: {
arxiv.org/abs/2302.07287
Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy
Enze Liu, Gautam Akiwate, Mattijs Jonker, Ariana Mirian, Grant Ho, Geoffrey M. Voelker, Stefan Savage
}

Screenshot from part of https://www.security.nl/posting/766069/DMARC+bypass+%28Outlook+only%3F%29#posting767981 Microsoft has meanwhile changed this behavior, but https://docs.microsoft.com/en-gb/microsoft-365/security/office-365-security/use-dmarc-to-validate-email#how-microsoft-365-handles-inbound-email-that-fails-dmarc used to read: { How Microsoft 365 handles inbound email that fails DMARC If the DMARC policy of the sending server is p=reject, Exchange Online Protection (EOP) marks the message as spoof instead of rejecting it. In other words, for inbound email, Microsoft 365 treats p=reject and p=quarantine the same way. [...] Microsoft 365 is configured like this because some legitimate email may fail DMARC. For example, a message might fail DMARC if it's sent to a mailing list that then relays the message to all list participants. If Microsoft 365 rejected these messages, people could lose legitimate email and have no way to retrieve it. Instead, these messages will still fail DMARC but they'll be marked as spam and not rejected. If desired, users can still get these messages in their inbox through these methods: • Users add safe senders individually by using their email client. [...] }
#SPF#DKIM#DMARC
Public *
Jeff Clemmons

May not be popular, but meh. Bear in mind I'm an American living in a red state and I lean left.

The #tiktok drama today seriously screams con job.

Oh, we're shutting down due to US law.

Soon to be new president says it's fine.

Yay, we're back up thanks to incoming prez.

Pretty sure the deal that was made was that Chinese propaganda includes right-wing propaganda. Don't see any other reason. We are boned, at least those of us that don't pay attention.

#FuckTrump#TikTokBan#Whatever
ExploreLive feeds
About