Other nomination
Old new email attacks
Email address parsers disagree about the bracketed domain-literal form: several permit CR LF inside the brackets, letting an attacker inject SMTP commands through an application's recipient field and send arbitrary mail from its own domain. Gmail and Outlook also parse group and multi-address From headers differently, enabling sender spoofing.
Record
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.