3 ms·
>it’s not like the people in charge of classified information handling at the national level haven’t heard of SPF or the concept of checking email headers I'd
by snvzz 2y ago
>it’s not like the people in charge of classified information handling at the national level haven’t heard of SPF or the concept of checking email headers
I'd hope. But I wouldn't count on it.
- acdha 2y agoI would. That kind of thing is a federal requirement for many years (https://www.cisa.gov/news-events/directives/bod-18-01-enhance-email-and-web-security https://www.cisa.gov/news-events/directives/bod-18-01-enhanc... was codifying existing practice) and everyone gets training on phishing which includes things like getting confirmation if you’re unsure. This is a highly sensitive request, almost certainly in violation of their records policies, so asking for confirmation is about as controversial as a bank teller calling the bank’s president to confirm that it’s really him asking to empty out the vault.