Skip to main content

Google, Microsoft and Yahoo fix serious email weakness

posted onOctober 25, 2012
by l33tdawg

Google, Microsoft and Yahoo have remedied a cryptographic weakness in their email systems that could allow an attacker to create a spoofed message that passes a mathematical security verification.

The weakness affects DKIM, or DomainKeys Identified Mail, a security system used by major email senders. DKIM wraps a cryptographic signature around an email that verifies the domain name through which the message was sent, which helps more easily filter out spoofed messages from legitimate ones.

The problem lies with signing keys that are less than 1,024 bits, which can be factored due to increasing computer power. US-CERT said in an advisory issued Wednesday that signing keys less than 1,024 bits are weak, and that keys up to RSA-768 bits have been factored.

Source

Tags

Google Microsoft Yahoo Security

You May Also Like

Recent News

Friday, November 8th

Friday, November 1st

Tuesday, July 9th

Wednesday, July 3rd

Friday, June 28th

Thursday, June 27th

Thursday, June 13th

Wednesday, June 12th

Tuesday, June 11th

Friday, June 7th