3 ms·
only way to make email work is to let the user choose what domain they trust, and maybe to have a feature where the user must whitelist addresses.
by jokoon 4y ago
only way to make email work is to let the user choose what domain they trust, and maybe to have a feature where the user must whitelist addresses.
- deleted 4y ago[deleted]
- Avamander 4y agoIn addition to further emphasis on "trusted senders" in the form of contact books, we'll also hopefully see a rise in identity-validated S/MIME. Though I get the feeling it'll hurt really bad before either gets deployed to a sufficient extent.
- fIREpOK 4y agoThen everyone would choose "gmail.com" and Google will get its true monopoly?
- killingtime74 4y agoGive google half a chance and they will make "Gmail" domain only opt-out, won't even ask you to choose
- 867-5309 4y agoover 90% of the world's smartphones are onboarding with gmail
- deno 4y agoI can’t find it but Gmail actually had some sort of whitepaper or something once about Gmail-originated SPAM and how it became a huge problem which was partially the reason they started doing phone verification. The parent’s comment is valid. Any modern email peer is doing domain based reputation which is possible thanks to SPF and DKIM, and if you don’t have those configured you’ll have a bad time. Then it’s the job of the domain owner or email operator (postmaster) to make sure you’re not blasting out SPAM and respond to abuse feedback. If you think about it, this is the only sane way for email to function without preauthentication. The only major outlier to this is Outlook, which is still doing IP based reputation. And of course a long tail of small server operators that rely on legacy SPAM lists from decade ago and reject only legitimate emails and pass through plenty of Viagra ads.