~/talk

How to Detect Your Domains Being Abused for Phishing Using DNS

TalkinDutchat Black Hat USA 2019 · 2019-08-03..08-08· [security, web-platform]
links:none on file
links:none on file
slides:none on file

Explains email-security standards (STARTTLS, SPF, DKIM, DMARC, DANE, MTA-STS) and advanced SPF options, and shows how to use DNS and those protocols to detect when your domains are being abused in phishing attacks.

AI-written summary · about

  1. 0:00Start
  2. 0:19black hat
  3. 4:10DNS-Based Authentication of Named Entities
  4. 16:34Sender Policy Framework - The Good
  5. 20:11Domain-based Authentication Reporting & Conformance
  6. 28:21DMARC Dashboards
  7. 30:39SPF Dashboarding (The Good)
  8. 42:51Lessons learned
  9. 45:04Final Thoughts
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.