II0-001 · Question #155
The single most valuable forgery protection in the Received: headers is the information logged by the:
The correct answer is D. the SMTP host receiving from the sender. Option D is correct because the SMTP receiving host logs the IP address of the machine that actually connected to it - this is the one piece of metadata a forger cannot easily fake, since the receiving server records it independently based on the actual TCP connection. The…
Question
The single most valuable forgery protection in the Received: headers is the information logged by the:
Options
- Asender to the receiving host
- Bemail client
- Csending machine
- Dthe SMTP host receiving from the sender
How the community answered
(32 responses)- A3% (1)
- B6% (2)
- C13% (4)
- D78% (25)
Explanation
Option D is correct because the SMTP receiving host logs the IP address of the machine that actually connected to it - this is the one piece of metadata a forger cannot easily fake, since the receiving server records it independently based on the actual TCP connection. The sender (A) and sending machine (C) both refer to the originating side, whose headers can be trivially spoofed; a forger controls that content entirely. The email client (B) generates headers before the message ever hits the network, making those equally forgeable. Only the receiving SMTP host's log entry is written by a trusted third party with no stake in the forgery.
Memory tip: Think of it like a doorman's log - the doorman (receiving SMTP host) writes down who walked through their door, and that entry can't be altered by the visitor who already left.
Community Discussion
No community discussion yet for this question.