ietf-smtp
[Top] [All Lists]

Re: [ietf-smtp] [Shutup] Compressing SMTP streams

2016-02-09 11:35:56
John Levine <johnl(_at_)taugh(_dot_)com> wrote:
In article 
<alpine(_dot_)LSU(_dot_)2(_dot_)00(_dot_)1602091044470(_dot_)21662(_at_)hermes-2(_dot_)csi(_dot_)cam(_dot_)ac(_dot_)uk>
 you write:

If you can identify an auto-responder which sends using SMTP AUTH PLAIN or
LOGIN, and if the SMTP AUTH and message envelope are in the same
compression context, you can use the coupling between the credentials and
your choice of recipient address to attack the credentials.

Wouldn't my CDAT that only compresses the data prevent that?

Yep! :-)

Tony.
-- 
f.anthony.n.finch  <dot(_at_)dotat(_dot_)at>  http://dotat.at/
Sole, Lundy, Fastnet, Irish Sea, Shannon, South Rockall: Westerly or
northwesterly 7 to severe gale 9, decreasing 5 to 7 later. High at first in
Sole, Shannon and Rockall, otherwise rough or very rough, but becoming
moderate in Irish Sea. Wintry showers. Good, occasionally poor.

_______________________________________________
ietf-smtp mailing list
ietf-smtp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf-smtp