4 ms·
I had no idea spoofing email sender was so easy. Does anyone know of a good way to defend against this? I've always taken it for granted that if the sender was
by redman25 2y ago
I had no idea spoofing email sender was so easy. Does anyone know of a good way to defend against this? I've always taken it for granted that if the sender was a domain that I trusted that I could trust the email itself.
- wongarsu 2y agoDKIM and SPF are supposed to prevent email sender spoofing, but that requires the domain owner to set it up correctly age the receiver to verify the records and actually distrust or discard the email if they don't match. Both steps aren't trivial, and configuration errors are more common than actual spoofing. DMARC is supposed to fix everything, but only if the domain owner cares enough to do more than the bare minimum setup
- redman25 2y agoAh, so this is a failure on nintendo's part for not protecting their email domain properly.
- DaSHacka 2y agoIsn't this the purpose of SPF/DKIM? https://www.cloudflare.com/learning/email-security/dmarc-dkim-spf/ https://www.cloudflare.com/learning/email-security/dmarc-dki...