{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,17]],"date-time":"2026-08-17T09:28:58Z","timestamp":1786958938280,"version":"build-2736575974"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032355850","type":"print"},{"value":"9783032355867","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T00:00:00Z","timestamp":1787011200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T00:00:00Z","timestamp":1787011200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2027]]},"DOI":"10.1007\/978-3-032-35586-7_24","type":"book-chapter","created":{"date-parts":[[2026,8,17]],"date-time":"2026-08-17T09:08:41Z","timestamp":1786957721000},"page":"442-458","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Authenticity Completeness: Why SMTP Authentication Extensions Fail"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3005-0709","authenticated-orcid":false,"given":"Ye","family":"Li","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9116-8789","authenticated-orcid":false,"given":"Abu","family":"Barkat Ullah","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0867-7908","authenticated-orcid":false,"given":"Elisa","family":"Martinez Marroquin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wanli","family":"Ma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,8,18]]},"reference":[{"key":"24_CR1","doi-asserted-by":"crossref","unstructured":"Andersen, K., Long, B., Blank, S., Kucherawy, M.S.: The authenticated received chain (arc) protocol. RFC 8617, 1\u201335 (2019). https:\/\/api.semanticscholar.org\/CorpusID:63755520","DOI":"10.17487\/RFC8617"},{"key":"24_CR2","unstructured":"Ashiq, M.I., Maroofi, S., Korczy\u0144ski, M., Duda, A.: You\u2019ve got report: measurement and security implications of DMARC reporting. In: ACM Internet Measurement Conference, pp. 567\u2013581 (2023)"},{"key":"24_CR3","doi-asserted-by":"publisher","unstructured":"Blacka, D., Blacka, D., Weiler, S., Weiler, S.: Clarifications and implementation notes for DNS security (DNSSEC). Request for Comments (2013). https:\/\/doi.org\/10.17487\/rfc6840","DOI":"10.17487\/rfc6840"},{"key":"24_CR4","unstructured":"Blechschmidt, B., Stock, B.: Extended hell(o): a comprehensive large-scale study on email confidentiality and integrity mechanisms in the wild. In: Proceedings of the 32nd USENIX Security Symposium, pp. 6549\u20136566. USENIX Association, Anaheim (2023). https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/blechschmidt"},{"key":"24_CR5","doi-asserted-by":"publisher","unstructured":"Borisov, N., Goldberg, I., Brewer, E.: Off-the-record communication, or, why not to use PGP. In: Proceedings of the 2004 ACM Workshop on Privacy in the Electronic Society, pp. 77\u201384. ACM (2004). https:\/\/doi.org\/10.1145\/1029179.1029200https:\/\/doi.org\/10.1145\/1029179.1029200","DOI":"10.1145\/1029179.1029200"},{"key":"24_CR6","unstructured":"Chen, J., Paxson, V., Jiang, J.: Composition kills: a case study of email sender authentication. In: 29th USENIX Security Symposium (USENIX Security 20), pp. 2183\u20132199. USENIX Association, Boston (2020). https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/chen-jianjun"},{"key":"24_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"360","DOI":"10.1007\/978-3-662-64322-8_18","volume-title":"Financial Cryptography and Data Security","author":"J Clark","year":"2021","unstructured":"Clark, J., van Oorschot, P.C., Ruoti, S., Seamons, K., Zappala, D.: SoK: securing email\u2014a stakeholder-based analysis. In: Borisov, N., Diaz, C. (eds.) FC 2021. LNCS, vol. 12674, pp. 360\u2013390. Springer, Heidelberg (2021). https:\/\/doi.org\/10.1007\/978-3-662-64322-8_18"},{"key":"24_CR8","doi-asserted-by":"crossref","unstructured":"Crocker, D.: Internet mail architecture. RFC 5598, Internet Engineering Task Force (2009)","DOI":"10.17487\/rfc5598"},{"key":"24_CR9","doi-asserted-by":"crossref","unstructured":"Durumeric, Z., et al.: Neither snow nor rain nor MITM... an empirical analysis of email delivery security. In: Proceedings of the 2015 Internet Measurement Conference, pp. 27\u201339 (2015)","DOI":"10.1145\/2815675.2815695"},{"key":"24_CR10","doi-asserted-by":"crossref","unstructured":"Foster, I.D., Larson, J., Masich, M., Snoeren, A.C., Savage, S., Levchenko, K.: Security by any other name: on the effectiveness of provider based email security. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp. 450\u2013464 (2015)","DOI":"10.1145\/2810103.2813607"},{"key":"24_CR11","doi-asserted-by":"crossref","unstructured":"Garfinkel, S.L., Miller, R.C.: Johnny 2: a user test of key continuity management with S\/MIME and outlook express. In: Proceedings of the 2005 Symposium on Usable Privacy and Security, pp. 13\u201324. ACM (2005)","DOI":"10.1145\/1073001.1073003"},{"key":"24_CR12","doi-asserted-by":"publisher","unstructured":"Hansen, T., Crocker, D., Kucherawy, M.S.: Domainkeys identified mail (DKIM) signatures. RFC\u00a06376, Internet Engineering Task Force (2011). https:\/\/doi.org\/10.17487\/RFC6376, https:\/\/datatracker.ietf.org\/doc\/html\/rfc6376","DOI":"10.17487\/RFC6376"},{"key":"24_CR13","unstructured":"Hu, H., Wang, G.: End-to-end measurements of email spoofing attacks. In: USENIX Security Symposium, pp. 1095\u20131112 (2018)"},{"key":"24_CR14","doi-asserted-by":"crossref","unstructured":"Katz, J., Lindell, Y.: Introduction to Modern Cryptography, 3 edn. CRC Press (2020)","DOI":"10.1201\/9781351133036"},{"key":"24_CR15","doi-asserted-by":"publisher","unstructured":"Kitterman, S.: Sender policy framework (SPF) for authorizing use of domains in email, version 1. RFC\u00a07208, Internet Engineering Task Force (2014). https:\/\/doi.org\/10.17487\/RFC7208, https:\/\/datatracker.ietf.org\/doc\/html\/rfc7208","DOI":"10.17487\/RFC7208"},{"key":"24_CR16","doi-asserted-by":"publisher","unstructured":"Klensin, J.: Simple mail transfer protocol. RFC\u00a05321, Internet Engineering Task Force (2008). https:\/\/doi.org\/10.17487\/rfc5321, https:\/\/tools.ietf.org\/html\/rfc5321","DOI":"10.17487\/rfc5321"},{"key":"24_CR17","doi-asserted-by":"publisher","unstructured":"Kucherawy, M.S., Zwicky, E.D.: Domain-based message authentication, reporting, and conformance (DMARC). RFC\u00a07489, Internet Engineering Task Force (2015). https:\/\/doi.org\/10.17487\/RFC7489, https:\/\/datatracker.ietf.org\/doc\/html\/rfc7489","DOI":"10.17487\/RFC7489"},{"key":"24_CR18","unstructured":"M\u00fcller, J., et al.: \u201cJohnny, you are fired!\u201d-spoofing OpenPGP and S\/MIME signatures in emails. In: USENIX Security Symposium, pp. 1011\u20131028 (2019)"},{"key":"24_CR19","doi-asserted-by":"publisher","unstructured":"Ramsdell, B.C.: Secure\/multipurpose internet mail extensions (S\/MIME) version 3.1 message specification (2004). https:\/\/doi.org\/10.17487\/RFC3851, https:\/\/www.rfc-editor.org\/info\/rfc3851","DOI":"10.17487\/RFC3851"},{"key":"24_CR20","doi-asserted-by":"publisher","unstructured":"Resnick, P.: Internet message format. RFC\u00a02822, Internet Engineering Task Force (2001). https:\/\/doi.org\/10.17487\/RFC2822, https:\/\/datatracker.ietf.org\/doc\/html\/rfc2822","DOI":"10.17487\/RFC2822"},{"key":"24_CR21","doi-asserted-by":"publisher","unstructured":"Ruoti, S., et al.: A usability study of four secure email tools using paired participants. ACM Trans. Priv. Secur. (2019). https:\/\/doi.org\/10.1145\/3313761","DOI":"10.1145\/3313761"},{"key":"24_CR22","unstructured":"Wang, C., et al.: A large-scale and longitudinal measurement study of DKIM deployment. In: Proceedings of the 31st USENIX Security Symposium (USENIX Security 2022), pp. 1185\u20131199. USENIX Association, Boston (2022). https:\/\/www.usenix.org\/system\/files\/sec22-wang-chuhan.pdf"},{"key":"24_CR23","unstructured":"Zimmermann, P.R.: The Official PGP User\u2019s Guide. MIT Press (1995)"}],"container-title":["Lecture Notes in Computer Science","Availability, Reliability and Security. ARES 2026 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-35586-7_24","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,17]],"date-time":"2026-08-17T09:08:52Z","timestamp":1786957732000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-35586-7_24"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,18]]},"ISBN":["9783032355850","9783032355867"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-35586-7_24","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,18]]},"assertion":[{"value":"18 August 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","label":"Disclosure of Interests","group":{"name":"EthicsHeading","label":"Ethics"}},{"value":"ARES","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Availability, Reliability and Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Link\u00f6ping","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Sweden","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 August 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 August 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ares-12026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.ares-conference.eu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}