On Sun, Dec 11, 2022 at 4:46 PM Michael Deutschmann <[email protected]> wrote: > > On Sun, 11 Dec 2022, Murray S. Kucherawy wrote: > > Then from that other account I can spray it to as many recipients as I > > want so long as the only thing I change is the envelope. > > Since the ISP is doing the signing, you can't stop them from using a > signature that protects the To: and Cc: from modification, and in practice > everyone already does that. That means the bonus messages you get to > send via the hack will have mismatched 822 and 821 recipients, equivalent > to a blind-carbon-copy. > > Blind-carbon-copy is already a sign of spam.
Except when it's not, like this very mailing list. Cheers, Al Iverson -- Al Iverson / Deliverability blogging at www.spamresource.com Subscribe to the weekly newsletter at wombatmail.com/sr.cgi DNS Tools at xnnd.com / (312) 725-0130 / Chicago (Central Time) _______________________________________________ Ietf-dkim mailing list [email protected] https://www.ietf.org/mailman/listinfo/ietf-dkim
