Revision 8ac6d200
Added by Marc Dequènes over 15 years ago
- ID 8ac6d2004f4f00e40a0964aae45edd72fed10498
| TODO | ||
|---|---|---|
|
- handle incoming encrypted messages from user to receive sensitive data, and to sign replies -> postman would need a GPG key too
|
||
|
- ban keys from unknow users flooding -> counter, reseted when key added in DB
|
||
|
- protect against replay (foo resending eavesdropped mail) -> store message IDs, but how to limit to a reasonnable timeframe ?
|
||
|
- protect against intercepted mail with falsified headers (From/Reply-To/... could be tampered to get replies, reply tampered too, and then resent to avoid being detected)
|
||
|
- protect against intercepted mail with falsified headers (From/Reply-To/... could be tampered to get replies, reply tampered too, and then resent to avoid being detected)
|
||
Also available in: Unified diff
[evol] activate outgoing mails