3 ms·
The attack described could not work with a strict DMARC policy. However of course, most small companies have no idea how to do SPF/DKIM/DMARC.
by jeromegv 3y ago
The attack described could not work with a strict DMARC policy.
However of course, most small companies have no idea how to do SPF/DKIM/DMARC.
- spacebanana7 3y agoCould you explain how DMARC would prevent this? If I attempted to create dozens of accounts on a website, trigger password resets emails, and report them as spam, where would DMARC prevent me?
- pc86 3y agoNobody is spoofing anything, DMARC won't help. This is marking legitimate emails as spam at scale to trigger actual spam controls against the legitimate organization.