4 ms·

So much low effort spam is making it through. I've had actual 90s era "help an inconvenienced Nigerian Prince" spam in my inbox several times the past few month

by DIVx0 5y ago

So much low effort spam is making it through. I've had actual 90s era "help an inconvenienced Nigerian Prince" spam in my inbox several times the past few months

lern_too_spel 5y ago
I'm getting spam in my inbox that doesn't even DKIM verify.
- Avamander 5y ago
  The issue is partially the fact that a lot of domains send mail without, they can't require it. They should, but they can't.
  - lern_too_spel 5y ago
    The fact that an email doesn't DKIM verify should make it less likely to get into my inbox if the rest of the email I receive does verify. Instead, I see at least one example per day, with text that is also clearly spammy. Not only can Google require it, they already have done something similar with Chrome ratcheting warnings to force HTTPS on the web in just a few years.
    - Avamander 5y ago
      > The fact that an email doesn't DKIM verify should make it less likely to get into my inbox if the rest of the email I receive does verify. Either you've gotten lucky or not as much e-mail verifies as you think. A lot of very legitimate e-mail is without DKIM, I'd say it's approx 50:50. > Not only can Google require it, they already have done something similar with Chrome ratcheting warnings to force HTTPS on the web in just a few years. They only have Gmail, not a near-monopoly of the e-mail market.
      - lern_too_spel 5y ago
        > Either you've gotten lucky or not as much e-mail verifies as you think. A lot of very legitimate e-mail is without DKIM, I'd say it's approx 50:50. Personal communications come from users of legitimate email services with DKIM. Legitimate commercial email comes from mail servers with DKIM for deliverability. Theonly email I get that doesn't verify is spam. I doubt my experience is out of the ordinary for US users. > They only have Gmail, not a near-monopoly of the e-mail market. They have effectively similar dominance in email because nearly 100% of mail servers have to send to Gmail users, just as nearly 100% of web servers have to serve Chrome users.
        Avamander 5y ago
        > I doubt my experience is out of the ordinary for US users. It's absolutely ordinary, but so is the opposite. Considering that DMARC is either-and, a lot of companies only employ SPF to reduce access and burden of updating DNS for DKIM keys for large amounts of senders.

by DIVx0 5y ago

So much low effort spam is making it through. I've had actual 90s era "help an inconvenienced Nigerian Prince" spam in my inbox several times the past few months

lern_too_spel 5y ago

I'm getting spam in my inbox that doesn't even DKIM verify.

Avamander 5y ago
The issue is partially the fact that a lot of domains send mail without, they can't require it. They should, but they can't.
- lern_too_spel 5y ago
  The fact that an email doesn't DKIM verify should make it less likely to get into my inbox if the rest of the email I receive does verify. Instead, I see at least one example per day, with text that is also clearly spammy. Not only can Google require it, they already have done something similar with Chrome ratcheting warnings to force HTTPS on the web in just a few years.
  - Avamander 5y ago
    > The fact that an email doesn't DKIM verify should make it less likely to get into my inbox if the rest of the email I receive does verify. Either you've gotten lucky or not as much e-mail verifies as you think. A lot of very legitimate e-mail is without DKIM, I'd say it's approx 50:50. > Not only can Google require it, they already have done something similar with Chrome ratcheting warnings to force HTTPS on the web in just a few years. They only have Gmail, not a near-monopoly of the e-mail market.
    - lern_too_spel 5y ago
      > Either you've gotten lucky or not as much e-mail verifies as you think. A lot of very legitimate e-mail is without DKIM, I'd say it's approx 50:50. Personal communications come from users of legitimate email services with DKIM. Legitimate commercial email comes from mail servers with DKIM for deliverability. Theonly email I get that doesn't verify is spam. I doubt my experience is out of the ordinary for US users. > They only have Gmail, not a near-monopoly of the e-mail market. They have effectively similar dominance in email because nearly 100% of mail servers have to send to Gmail users, just as nearly 100% of web servers have to serve Chrome users.
      - Avamander 5y ago
        > I doubt my experience is out of the ordinary for US users. It's absolutely ordinary, but so is the opposite. Considering that DMARC is either-and, a lot of companies only employ SPF to reduce access and burden of updating DNS for DKIM keys for large amounts of senders.