> On May 18, 2018, at 7:09 AM, Vladimir Dubrovin <[email protected]> wrote:
> 
> 
> EFAIL exploitation requires MitM conditions. Neither DKIM nor DMARC protect 
> against attacker able to perform MitM.
> 

It just requires the attacker to have a copy of the encrypted mail. Passive 
mitm is one approach to that, but only one of many.

Cheers,
  Steve

> 
> 15.05.2018 17:15, Kurt Andersen пишет:
>> Manipulating MIME structures in email messages to expose the encrypted 
>> content: https://efail.de/
>> 
>> --Kurt
>> 
>> 
>> _______________________________________________
>> dmarc mailing list
>> 
>> [email protected]
>> https://www.ietf.org/mailman/listinfo/dmarc
> 
> -- 
> Vladimir Dubrovin
> @Mail.Ru
> 
> _______________________________________________
> dmarc mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/dmarc

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to