From: [email protected] - Spoofing Arbitrary Apple iCloud Identities
Summary
A case study on two email spoofing vulnerabilities in Apple iCloud's SMTP infrastructure, focusing on header spoofing, From-header interpretation, and how SPF, DKIM, and DMARC can be bypassed through SMTP parsing differences. It also covers techniques like header and dot-stuffing smuggling, defense indicators, and the significance of bug bounties in improving sender identity security.