3 ms·
You can just filter emails based on their from addresses.
by waynesonfire 1y ago
You can just filter emails based on their from addresses.
- JimDabell 1y agoSo if an organisation emails you from no-reply@notifications.example.com, mailing-list@examplemail.com, and bob.smith@examplecorp.com, and the phisher emails you from support@example.help, which filter based on their from addresses makes all the legitimate ones show up as the same sender while excluding the phishing email?
- artemisart 1y agoWhy should we expect companies to be able to reuse the correct token if they can't coordinate on using a single domain in the first place?
- JimDabell 1y agoYour assumption that they use more than one domain by accident due to a lack of coördination is not correct. Separating, e.g. your product email from your mailing list email from your corporate email has a number of benefits. Anyway, I already mentioned a solid incentive for them to use the correct token. Go back and read my earlier comment.
- cuu508 1y agoIt is correct at least in some cases. https://news.ycombinator.com/item?id=45190323 https://news.ycombinator.com/item?id=45190323
- zahlman 1y ago> which filter based on their from addresses makes all the legitimate ones show up as the same sender while excluding the phishing email? This is the wrong question. The right question is: what should we do about the fact that the organization has such terrible security practice? And the answer is: call them on the phone, and tell them that you will not do business with them until they fix their shit.