Mathematician unlocks weak domain keys Google and Microsoft affected
DomainKeys Identified Mail (DKIM) Verifiers with vulnerable encryption keys found by US mathematician Compromised DKIM keys allows attackers to ship phishing attacks, bypassing filters DOMAINKEYS Identified Mail (DKIM) Verifiers have been observed to be liable to abuse by way of attackers due to susceptible encryption, taking into account the spoofing of e-mails from diagnosed domains. The Department of Homeland Security's United States Computer Emergency Readiness Team (US-CERT) issued a note on Oct 24 stating that DKIM Verifiers may also inappropriately carry believe while messages are signed using test or small bit signing keys. DKIM is a way for associating a site name to an electronic mail message, permitting someone, position, or employer to say some duty for the message. The affiliation is set up by way of a virtual signature which may be confirmed by recipients. The safety weak point approach that potential attackers could ship spoof emails signed with a compa...