Re: [Mailman-Users] Yahoo - what chance of change now?

2014-06-10 Thread Larry Finch
On Jun 9, 2014, at 10:44 PM, Stephen J. Turnbull step...@xemacs.org wrote: spoofing of AOL addresses ballooned to about 5X the volume preceding the attack, and presumably all of the new spoof messages were targeted to acquaintences since the attackers are known to have obtained

Re: [Mailman-Users] Yahoo - what chance of change now?

2014-06-10 Thread Stephen J. Turnbull
Larry Finch writes: DMARC helped briefly, but spammers and phishers have already found ways to defeat it. I have seen a surge in AOL-based phishing this week. They simply use the AOL screen name in the comment in the FROM field with a non-AOL address. As most mail clients don't display

[Mailman-Users] Yahoo - what chance of change now?

2014-06-09 Thread Peter Shute
It's now about 2 months since Yahoo introduced their DMARC reject policy. I'm taking this as a sign that it's unlikely that they'll ever reverse the decision Has anyone heard anything that might indicate otherwise? Or that any mailbox providers other than Yahoo and AOL have started doing it, or

Re: [Mailman-Users] Yahoo - what chance of change now?

2014-06-09 Thread Peter Shute
] Sent: Tuesday, 10 June 2014 12:44 PM To: Peter Shute Cc: 'mailman-users@python.org' Subject: [Mailman-Users] Yahoo - what chance of change now? Peter Shute writes: It's now about 2 months since Yahoo introduced their DMARC reject policy. I'm taking this as a sign that it's

[Mailman-Users] Yahoo - what chance of change now?

2014-06-09 Thread Stephen J. Turnbull
Peter Shute writes: It's now about 2 months since Yahoo introduced their DMARC reject policy. I'm taking this as a sign that it's unlikely that they'll ever reverse the decision On the DMARC list at IETF, a senior Yahoo! sysadmin said that because the attack based on stolen address book

Re: [Mailman-Users] Yahoo - what chance of change now?

2014-06-09 Thread Stephen J. Turnbull
Peter Shute writes: I'm interested to know what's in store because our current tactic is to reject new Yahoo and AOL subscribers, encourage existing ones to get new addresses, and to forward their messages by hand. This is obviously not going to work if other providers gradually start