Protokoli za varno elektronsko pošto : diplomsko delo

Turk, Alenka (author), Brodnik, Andrej (mentor)

V diplomskem delu spoznamo delovanje sistema elektronske pošte, kakšna je pri tem vloga DNS in ranljivosti protokola SMTP. Za nemoteno delovanje storitve je zelo pomembna ustrezna zaščita poštnega strežnika, kjer osnovno vlogo igrajo strežniški certifikati in varna povezava SSL. Dodatni varnostni mehanizem dosežemo z avtentikacijo e-pošte. V ta namen smo predstavili orodja SPF, DKIM in DMARC. SPF preverja naslov IP pošiljatelja in določa ali je le-ta avtoriziran za pošiljanje elektronskega sporočila z identificirano identiteto. DKIM poslanemu sporočilu doda domenski digitalni podpis in zavaruje vsebino sporočila. Z mehanizmom DMARC pa se na podlagi rezultatov obeh prejšnjih določi pravila, ki ciljnemu strežniku narekujejo, kakšen ukrep naj izvede nad prejetim sporočilom. Izvedli smo implementacije vseh omenjenih mehanizmov in ugotavljali o njihovi učinkovitosti delovanja.

• Language: Slovenian
• Keywords: elektronska pošta, avtentikacija, poštni strežnik, SMTP, SPF, DKIM, DMARC, računalništvo, računalništvo in informatika, univerzitetni študij, diplomske naloge
• Work type: Bachelor thesis/paper
• Typology: 2.11 - Undergraduate Thesis
• Organization: FRI - Faculty of Computer and Information Science
• Publisher: [A. Turk]
• Year: 2014
• Number of pages: 80 str.
• PID: 20.500.12556/RUL-68977
• UDC: 004.773.3(043.2)
• COBISS.SI-ID: 1536068803
• Publication date in RUL: 10.07.2015

Secondary language

• Language: English
• Title: Protocols for secure electronic mail

Abstract

In this thesis, we learn in more detail about the functioning of the e-mail system, the role of the DNS, and the vulnerability of the SMTP. In order for the service to run smoothly, a suitable protection of the mail server is significant. Server certificates and SSL play a central role here. An additional way is achieved by e-mail authentication. To this purpose, we presented a variety of authentication mechanisms, SPF, DKIM, and DMARC. SPF checks the IP address of the sender and determines whether he or she is authorized to send e-mails with that identity. DKIM adds a digital signature to the sent e-mail and secures the content of the message. DMARC mechanism is based on the results of the two aforementioned authentication mechanisms. It specifies the rules for the destination server of the received message, dictating what action it should perform on it. We carried out the implementation of these mechanisms and tested their performance.

• Keywords: e-mail, authentication, mail server, SMTP, SPF, DKIM, DMARC, computer science, computer and information science, diploma