2 ms·
Having SPF and DKIM implemented says little about the email coming from a server. But it should allow filtering of spam from domains based on the history of em
by cge 4y ago
Having SPF and DKIM implemented says little about the email coming from a server. But it should allow filtering of spam from domains based on the history of emails received from them, and how users have interacted with them. They should allow the keeping of trust scores at a domain, rather than server or IP, level, and that should be feasible with even relatively few emails involved.
Yet Google and Microsoft don't do that. I can send replies on a personal domain and server to people I've talked with often in the past, and quite often they'll go to spam with Gmail. I can send emails to universities running Office365 from the domain of a prominent university, and sometimes they'll go to spam. I've seen Google and Microsoft email at universities have emails from mts-nature.nature.com, Nature's manuscript tracking system, something no academic would want sent to spam, get sent to spam. SPF and DKIM should allow these things to be rather simply avoidable. But they don't.