4 ms·
With a proper SPF record, we can verify whether or not they came from the right servers. Google verified that PayPal's e-mails were legitimate. You can't spoo
by RIMR 8y ago
With a proper SPF record, we can verify whether or not they came from the right servers. Google verified that PayPal's e-mails were legitimate.
You can't spoof those addresses convincingly unless you compromise a legitimate mail server listed in the SPF, or hijack BGP to impersonate a legitimate mail server in the SPF.
Google is filtering known trustworthy senders for dubious reasons.
- brazzledazzle 8y agoThat’s not what they mean. They mean the services can be used in a “legitimate” way that doesn’t involve hijacking to spam people.