search

emersion / go-smtp

📤 An SMTP client & server library written in Go
MIT License
1.72k stars 216 forks source link

[Security] Implement strict CRLF mode #243

Closed foxcpp closed 9 months ago

foxcpp commented 9 months ago

See https://www.postfix.org/smtp-smuggling.html

We probably should implement the same "Long-term fix".

emersion commented 9 months ago

Yeah, seen that… Indeed, we probably want a strict mode at least on-by-default.