4 ms·
I run a small org (freelancer) and I have a super advanced bullet proof set of solutions against this. Any 1 of those should do the trick (I do all of these):
by bboygravity 3y ago
I run a small org (freelancer) and I have a super advanced bullet proof set of solutions against this. Any 1 of those should do the trick (I do all of these):
1. Don't trick people into signing up for mailinglists.
2. Don't spam.
3. Don't use mailinglists.
My small business is fine.
- spacebanana7 3y agoNot against a targeted attack like the one described. A clickfarm marking password reset emails as spam could create real harm. Even a malicious individual doing this to 2-3 fair transactional emails could cause damage for a small business with low volume.
- jeromegv 3y agoThe attack described could not work with a strict DMARC policy. However of course, most small companies have no idea how to do SPF/DKIM/DMARC.
- spacebanana7 3y agoCould you explain how DMARC would prevent this? If I attempted to create dozens of accounts on a website, trigger password resets emails, and report them as spam, where would DMARC prevent me?
- pc86 3y agoNobody is spoofing anything, DMARC won't help. This is marking legitimate emails as spam at scale to trigger actual spam controls against the legitimate organization.