Lähettäjä: Jeremy Harris Päiväys: Vastaanottaja: exim-users Aihe: Re: [exim] Exim header check and mailsploit?
On 06/12/17 16:12, Adrian Zaugg wrote: > The mailsploit attack relies on special chars like newline or the nul
> character encoded in base64 or quoted-printable. In my opinion encoded
> strings in mail headers should get decoded for validity checking, e.g
> when setting in an ACL: require verify = headers_syntax
> Am I wrong with this assumption?
RFC 5322 says nothing about encoding.
--
Cheers,
Jeremy