Chuhan Wang

Kaiwen Shen

Minglei Guo

Yuxuan Zhao

Mingming Zhang

Jianjun Chen

Baojun Liu

郑晓峰

段海新

Yanzhong Lin

Qingfeng Pan

USENIX Security 

The USENIX Association is a 501(c)(3) nonprofit organization, dedicated to supporting the advanced computing systems communities and furthering the reach of innovative research. We are known for organizing conferences and publishing research, but our greatest strength lies in building communities in computing systems. We represent the interests of our communities in a variety of ways, including our professional affiliation with the Computing Research Association.

Since 1975, USENIX has brought together the community of engineers, researchers, and practitioners working on the cutting edge of the computing world. USENIX conferences have become the essential meeting grounds for the presentation and discussion of the most advanced information on the development of all aspects of computing systems.

DomainKeys Identified Mail (DKIM) is an email authentication protocol to protect the integrity of email contents. It has been proposed and standardized for over a decade and adopted by Yahoo!, Google, and other leading email service providers. However, little has been done to understand the
adoption rate and potential security issues of DKIM due to the challenges of measuring DKIM deployment at scale. In this paper, we provide a large-scale and longitudinal measurement study on how well DKIM is deployed and managed. Our study was made possible by a broad collection of datasets, including 9.5 million DKIM records from passive DNS datasets over five years and 460 million DKIM signatures from real-world email headers. Moreover, we conduct an active measurement on Alexa Top 1 million domains. Our measurement results show that 28.1% of Alexa Top 1 million domains have enabled DKIM, of which 2.9% are misconfigured. We demonstrate that the issues of DKIM key management and DKIM signatures are prevalent in the real world, even for well-known email providers (e.g., Gmail and Mail.ru). We recommend the security community should pay more attention to the systemic problems of DKIM deployment and mitigate these issues from the perspective of protocol design.


A Large-scale and Longitudinal Measurement Study of DKIM Deployment 

今天分享的论文主题为邮件协议安全，由来自清华大学、华北计算技术研究所、奇安信及Coremail的研究人员共同完成。DomainKeys Identified Mail（DKIM）是一个用于保护电子邮件内容的完整性认证协议。该协议2011年被正式标准化[2]，目前已被雅虎、谷歌和其他知名电子邮件服务提供商所采用。由于DKIM协议的特性，对其进行大规模测量是非常困难的。因此，DKIM的现实部署情况及可

【论文分享】针对邮件安全扩展协议DKIM的大规模测量与安全性分析（邮件系统安全学术前沿系列）

【论文分享】针对邮件安全扩展协议DKIM的大规模测量与安全性分析（邮件系统安全学术前沿系列）

A Large-scale and Longitudinal Measurement Study of DKIM Deployment 查看来源