On 14/07/2020 15:41, Dave Crocker wrote:
On 7/14/2020 2:52 AM, Alessandro Vesely wrote:
And phishers can also send mail From: fm.bank and Sender: regleissei.icu. To
publish a DMARC policy would avail Farmers & Merchants nothing, then.
If regleissei.icu publishes a DMARC record and indicates support for use of
Sender:, per the proposal, please explain exactly what bad things will happen,
in the case you offer.
Fm.bank, Farmers & Merchants State Bank in Archbold, Ohio, is one of the early
dot-bank switchers. _dmarc.bank doesn't yet exist, but it's planned, AFAIK.
Regleissei.icu was one of the many light footprint domains spammers used. A
year ago it had all DMARC, SPF, DKIM and whatever records. Now it's gone.
At mine, I ban the whole .ico TLD. However, life is not always easy.
I can enable DMARC on all .bank, and tell users to painstakingly check From:,
and if they get phished I can tell them they're morons.
Best
Ale
--
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc