Dan Kaminsky reports on a vuln in an SPF-checking software library that has been rumbling around a few security-related fora for a while.
DNS TXT Record Parsing Bug in LibSPF2 and No School Like The Old School are required reading if you check SPF on the inbound.




Comments