[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] VeriSign's fake SMTP server for SiteFinder

To: Dan Rowles <d.rowles@xxxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [Full-Disclosure] VeriSign's fake SMTP server for SiteFinder
From: Valdis.Kletnieks@xxxxxx
Date: Mon, 22 Sep 2003 21:41:14 -0400

On Mon, 22 Sep 2003 21:37:33 BST, Dan Rowles said:

> But why they wait until the DATA command is a total mystery to me. It
> seems much more logical to bounce the message after the RCPT TO:
> command. 

The cynic in me notes that the RFC2822 From/To/CC can be different from
the RFC2821 MAIL FROM/RCPT TO.

Attachment: pgp00062.pgp
Description: PGP signature

References:
- [Full-Disclosure] VeriSign's fake SMTP server for SiteFinder
  - From: Richard M. Smith
- Re: [Full-Disclosure] VeriSign's fake SMTP server for SiteFinder
  - From: Dan Rowles

Prev by Date: Re: [Full-Disclosure] VeriSign's fake SMTP server for SiteFinder
Next by Date: Re: [Full-Disclosure] Is Marty Lying?
Previous by thread: Re: [Full-Disclosure] VeriSign's fake SMTP server for SiteFinder
Next by thread: Re: [Full-Disclosure] VeriSign's fake SMTP server for SiteFinder
Index(es):
- Date
- Thread