How to prevent email spoofing, using an unholy combination of silly standards

Re:How to prevent email spoofing, using an unholy combinatio... by relax88 on Sunday August 15, 2021 @05:21PM (#28192630)

The title seems a bit dramatic but I can see how this sort of stuff would throw anyone without a history of network or systems administration for a loop.

This is one thing I really enjoyed about setting up ProtonMail with my personal domain. They make it really simple to validate that SPF, DKIM, and DMARC are set up properly.

[ Parent | on HN ]

Re:How to prevent email spoofing, using an unholy combinatio... by simon360 on Sunday August 15, 2021 @05:35PM (#28192743)

I didn't realise that ProtonMail had DMARC built in. I'm kind of surprised more email providers aren't including DMARC report analysis out-of-the-box, to be honest.

If Google Workspace/G Suite started pushing admins to use DMARC, and provided tools to make it easy, so many more domains would be protected, particularly in startup world.

[ Parent | on HN ]

Re:How to prevent email spoofing, using an unholy combinatio... by dang on Sunday August 15, 2021 @05:24PM (#28192665)

Ok, we've changed it to the (slightly less dramatic?) subtitle. Not sure which is the better choice here...

[ Parent | on HN ]

Re:How to prevent email spoofing, using an unholy combinatio... by Jiocus on Sunday August 15, 2021 @10:25PM (#28194397)

I agree about Protonmail. Never used their service, helped a client straighten their records for a project. No issues.

Tutanota are just as straightforward, but they're both in the security game so not much of a surprise there.

[ Parent | on HN ]