Security Basics mailing list archives

Re: Verifying E-Mail Addresses


From: bucklerk () dsa com
Date: 25 Oct 2006 12:20:49 -0000

You can with SMTP's VRFY command I believe.
HOWEVER, I highly reccomend administrators do NOT enable VRFY due to its possibility of abuse.
What sounds like a quick means of checking for valid recipients can also be used by hackers and spammers to probe a 
system for valid accounts.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: