SPF, DKIM, DMARC

Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks
This paper systematically analyzes the transmission of an email and identifies a series of new attacks capable of bypassing SPF, DKIM, DMARC and user-interface protections. We conduct a largescale experiment on 30 popular email services and 23 email clients, and find that all of them are vulnerable to certain types of new attacks.
Kaiwen Shen, Chuhan Wang, Minglei Guo, Xiaofeng Zheng, Chaoyi Lu, Baojun Liu, Yuxuan Zhao, Shuang Hao, Haixin Duan, Qingfeng Pan, Min Yang
PDF Cite Slides
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks