>dmarc.fail is an interesting approach, however the spam filters aren't the >concern that's >being raised here, user education is. Teach people that >my.fri...@real.domain.some-unfamiliar-stuff is a reasonable email address to >receive >email from (vs. teaching them to treat that as extremely suspicious) by >periodically >having legitimate email arrive that way (and preferentially from >heavily-phished domains) >and you incrementally help phishers.
How is this different from everyone's favorite alleged mailing list solution? From: Foo list on behalf of Jane Smith <f...@list.org> R's, John PS: well, other than it's a little more explicit about where the responsibility lies _______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)