On Thu, Apr 01, 2021 at 04:51:34PM +0100, Laura Atkins via mailop wrote: > > > > On 1 Apr 2021, at 15:36, Marcel Becker via mailop <[email protected]> wrote: > > > > On Thu, Apr 1, 2021 at 12:43 AM Hans-Martin Mosner via mailop > > <[email protected] <mailto:[email protected]>> wrote: > > > > One option that you should consider to mitigate the effects for recipients > > is to allow per-recipient DMARC exceptions, because the recipient is the > > one who ultimately decides whether mail is wanted or unwanted. > > > > Recipients are the ones least able to make a decision whether a mail > > claiming to be from brand.com <http://brand.com/> was really sent from > > brand.com <http://brand.com/>. They don't even know that a mail from > > lookslikebrand.com <http://lookslikebrand.com/> is not legit, move it out > > of the spam folder and then proceed to interact with it… > > And half of the time looklikebrand.com is actually said brand. > > laura
And even if lookalikebrand.com is a fake/phish - the sender is either going to not have DMARC/SPF records or they're going to set them up to be perfect - in either case, this argument is irrelevant. PG _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
