5 ms·
Even if you validate certificates an active attacker can return false MX records and direct the sending MTA to connect to an attacker-controlled server which pr
by brl 12y ago
Even if you validate certificates an active attacker can return false MX records and direct the sending MTA to connect to an attacker-controlled server which presents a perfectly valid certificate.