4 ms·
DMARC does a great job at stopping direct domain spoofs. Like jane.ceo@company.com (where company.com is at dmarc p=reject). But it doesn't address display name
by jacobr1 7y ago
DMARC does a great job at stopping direct domain spoofs. Like jane.ceo@company.com (where company.com is at dmarc p=reject). But it doesn't address display names attacks "Jane CEO <ceo123@gmail.com>" or as is increasingly the case: compromises of real accounts, even those otherwise protected with DMARC. But everyone should use dmarc, just like websites should use https for the baseline protection.
- jsiepkes 7y agoThat last problem is probably more of a UI then a protocol thing. For example if someone isn't in your address book you could make the back ground red or not display the display name at all.
- est 7y agoEmail UI problem is an email problem. non power-users have little clue about how Email works.