On 6/7/26 11:59 PM, S Kishore wrote:
Paul -
I agree that it is folly to guess email addresses. I believe the issue
that Bob points out is different from the one I suspect you are
imagining. Bob’s attack is not looking for a misspelling for a popular
email ID like Alice and trying to register its variations. Instead if an
attacker wants to attack a specific ID, say [email protected], the
attacker can register [email protected], and a public key for it,
then social engineering attacks are possible,
IIUC, that isn't possible with gmail. It considers
[email protected] to be an alias for [email protected], and so
wouldn't permit it to be registered as a new account.
Thanks,
Paul
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
