News for hackers. Stuff that matters.

A comment on Notifying Our Users of Attacks by Suspected State-Sponsored Actors. Parent comment

Re:Notifying Our Users of Attacks by Suspected State-Sponsor... by jlgaddis on Wednesday December 23, 2015 @01:31AM (#10782253)
Sorry, I was referring to messages received at my mail system that originate on Yahoo!'s mail system; more specifically, messages that are signed by a yahoo.com key and coming from a yahoo.com mail host (according to DKIM and SPF).

Anyways...

> "Yahoo doesn't consider a properly DKIM or Domainkeys email something that should not just end up in the spam folder"

Nor should they. There's plenty of actual spam that passes SPF and DKIM checks -- which brings us back to my original point (the amount of spam that I receive from Yahoo!). A message should not be treated as non-spam just because it passes those checks -- they are merely one factor to consider.

[ Parent | on HN ]
Re:Notifying Our Users of Attacks by Suspected State-Sponsor... by grandalf on Wednesday December 23, 2015 @12:07PM (#10784279)
> Nor should they

Of course not as the only criterion. But the messages in question were not spam, they were legitimate emails with DKIM, Domainkeys, SPF, long term non-spam IP address, etc.

[ Parent | on HN ]