On May 4, 2014, at 4:07 PM, Lindsay Haisley <fmo...@fmp.com> wrote:

> $ dig +short -t txt _dmarc.paypal.com
> "v=DMARC1\; p=reject\; rua=mailto:d...@rua.agari.com\; 
> ruf=mailto:d...@bounce.paypal.com,mailto:d...@ruf.agari.com";
> 
> This probably is a problem of lesser magnitude than Yahoo! and AOL since
> few list posts will come from PayPal, or be delivered to such an address
> from a list.  It might, however, occur by accident, or by a future
> change whereby PayPal account holders to use their DN, and although I
> can't imagine PayPal doing this, nothing seems to be sacrosanct or
> certain in the Wild, Wild West that is the Internet.  
> 
> It's more likely that a list might add a PayPal general customer
> notifications address of some sort to a list, with nomail set, for the
> benefit of other list subscribers.

This is probably the first actual practical application of DMARC p=reject that 
I have seen. Unfortunately, Yahoo’s and AOL’s abuse of DMARC will tend to 
neutralize the benefit of DMARC to financial institutions who have a really 
serious spoofing problem.

best regards,
Larry

--
Larry Finch
finc...@portadmiral.org



------------------------------------------------------
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to