home | list info | list archive | date index | thread index

Re: DMARC reports (was Re: sending email via teksavvy relay)

  • Subject: Re: DMARC reports (was Re: sending email via teksavvy relay)
  • From: Dianne Skoll <dianne [ at ] skoll [ dot ] ca>
  • Date: Mon, 3 Feb 2025 12:27:45 -0500
On Mon, 3 Feb 2025 09:12:40 -0800
Ron / BCLUG via linux <linux [ at ] linux-ottawa [ dot ] org> wrote:

> Wouldn't spoofing attempts be foiled by DKIM & SPF, so the spoofing
> attempts are doomed to fail

Yes.

> and can't really be dealt with anyway?

Well, maybe.  If a brand notices an upsurge in spoofing (via DMARC
reports) it could warn its clients of an ongoing attack.  There are
still some email providers (especially self-hosted ones run by less
competent admins) who don't check DKIM or SPF, and so you'd want to
warn clients on those email systems.

Or the brand could actually try to find the perpetrators, though as
you say, that's likely a losing proposition.

Regards,

Dianne.

To unsubscribe send a blank message to linux+unsubscribe [ at ] linux-ottawa [ dot ] org
To get help send a blank message to linux+help [ at ] linux-ottawa [ dot ] org
To visit the archives: https://lists.linux-ottawa.org