Spoofed Emails: An Analysis of the Issues Hindering a Larger Deployment of DMARC - DRAKKAR
Communication Dans Un Congrès Année : 2024

Spoofed Emails: An Analysis of the Issues Hindering a Larger Deployment of DMARC

Résumé

n 2015, the IETF released an informational specification for the DMARC protocol, not establishing it as an Internet standard. DMARC is designed to fight against email spoofing, on top of SPF and DKIM. Given that these anti-spoofing measures could lead to the loss of legitimate emails, DMARC embedded a reporting system enabling domain owners to monitor rejected messages and enhance their configurations. Research communities have extensively examined various aspects of DMARC, including adoption rates, misuse, and integration into early spam detection systems while overlooking other vital aspects, potentially impeding its broader use and adoption. This paper sheds light on a widespread lack of comprehension of the standard and unexpected behavior regarding DMARC among various groups, including professionals, open-source libraries, and domain owners. We propose measurement and analysis approaches that include a DMARC record parser, a methodology for dataset collection, and an analysis of the domain name landscape. We provide insights for fostering a deeper understanding of the DMARC ecosystem. We also identify email addresses in DMARC records belonging to 9,121 unregistered domain names, which unintended users could register, leading to potential data leakage from the email systems of domain owners.
Fichier principal
Vignette du fichier
2024_PAM_DMARC_SPOOFED_EMAIL (1).pdf (642.56 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
licence

Dates et versions

hal-04766388 , version 1 (07-11-2024)

Licence

Identifiants

Citer

Olivier Hureau, Jan Bayer, Andrzej Duda, Maciej Korczyński. Spoofed Emails: An Analysis of the Issues Hindering a Larger Deployment of DMARC. Passive and Active Measurement (PAM) 2024., Mar 2024, Virtual conference, France. pp.232-261, ⟨10.1007/978-3-031-56249-5_10⟩. ⟨hal-04766388⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

More