Qmail 10 ani de securitate

November 6, 2007 , 1:16 pm

Qmail, probabil cel mai secure MTA. La 10 ani de la aceiasi versiune, Daniel J. Bernstein adica programatorul, a scos un document prin care spune cateva ganduri despre securitatea proverbiala a Qmail. Este pur si simplu incredibil cum un soft care nu a fost updatat de 10 ani sa fie tot boolet proof si sa fie folosit de site-uri ca:

USA.net’s outgoing email, Address.com,
Rediffmail.com, Colonize.com, Yahoo! mail,
Network Solutions, Verio, MessageLabs
(searching 100M emails/week for malware),
listserv.acsu.buffalo.edu (a big listserv hub,
using qmail since 1996), Ohio State (biggest US
University), Yahoo! Groups, Listbot,
USWest.net (Western US ISP), Telenordia,
gmx.de (German ISP), NetZero (free ISP),
Critical Path (email outsourcing service w/ 15M
mailboxes), PayPal/Confinity, Hypermart.net,
Casema, Pair Networks, Topica, MyNet.co

Da, voi care folositi Yahoo! Mail, folositi de fapt softul despre care am povestit aici.

Trecand peste detalile tehnice, filosofia e de baza.
Some thoughts on security after ten years of qmail 1.0

In March 1997, I took the unusual step of publicly offering
$500 to the first person to publish a verifiable security hole
in the latest version of qmail: for example, a way for a user
to exploit qmail to take over another account. My offer still
stands. Nobody has found any security holes in qmail. I
hereby increase the offer to $1000.

Scris de admin in IT&C Related,OSS,www | (5) Comentarii