{"id":50642,"date":"2023-02-19T09:00:07","date_gmt":"2023-02-19T09:00:07","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/if-youre-struggling-to-secure-email-forwarding-its-not-you-its-the-protocols\/"},"modified":"2023-02-19T09:00:07","modified_gmt":"2023-02-19T09:00:07","slug":"if-youre-struggling-to-secure-email-forwarding-its-not-you-its-the-protocols","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/if-youre-struggling-to-secure-email-forwarding-its-not-you-its-the-protocols\/","title":{"rendered":"If you’re struggling to secure email forwarding, it’s not you, it’s … the protocols"},"content":{"rendered":"

Analysis<\/span> Over the past two decades, efforts have been made to make email more secure. Alas, defensive protocols implemented during this period, such as SPF, DKIM, and DMARC, remain unable to deal with the complexity of email forwarding and differing standards, a study has concluded.<\/p>\n

In a preprint paper<\/a> titled, “Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy,” scheduled to appear at the 8th IEEE European Symposium on Security and Privacy in July, authors Enze Liu, Gautam Akiwate, Mattijs Jonker, Ariana Mirian, Grant Ho, Geoffrey Voelker, and Stefan Savage show that email messages can be easily spoofed despite the existence of supposed defenses.<\/p>\n

The researchers, affiliated with UC San Diego and Stanford University in the US, and University of Twente in the Netherlands, reveal that attackers can still easily take advantage of security issues arising from email forwarding. They demonstrated this by delivering spoofed messages to accounts at major email providers like Google Gmail, Microsoft Outlook, and Zoho.<\/p>\n