[dkim-ops] Bogus DKIM signatures?
Jim Fenton
fenton at bluepopcorn.net
Tue Jun 2 21:12:26 PDT 2009
I heard two reports today of DKIM-signed spam being received by GMail
users, and got a sample from one of them. The message, from an IP
address in Romania, had an obviously-doctored DKIM signature. They took
a yahoo.com signature from late April and changed the d= to mahoo.dom .
Same with the DK signature.
Anyone else seeing anything like this? I'm wondering why they think
this might be a useful thing to do.
-Jim
More information about the dkim-ops
mailing list