News for hackers. Stuff that matters.
Re:Email: Explained from First Principles by efreak on Monday February 20, 2023 @05:45PM (#34873933)
And setting up DMARC opens you up to an entirely new type of spam: corporate networks emailing you every time someone spoofs you. I had it set up for a short time before I quickly turned it back off.
Re:Email: Explained from First Principles by KasparEtter on Tuesday February 21, 2023 @03:04AM (#34878168)
For one thing, you can configure a DMARC policy without a reporting address. For another thing, you can use third-party services, such as https://dmarc.postmarkapp.com/, to aggregate DMARC reports for you (if you're fine with the privacy implications of that).
Re:Email: Explained from First Principles by LeonM on Tuesday February 21, 2023 @05:05AM (#34879105)
You can also just set up DMARC without a reporting endpoint. But DMARC aggregate reports are very useful, so I wouldn't recommend using DMARC without reporting. Also, you do not receive a report 'every time someone spoofs you', but rather periodically, at an interval which you can even configure.

That said, DMARC aggregate reports are not supposed to be human readable. You don't want to set the reporting endpoint to your personal inbox. You need a DMARC aggregation tool, such as included in https://www.mailhardener.com to process them. (full disclosure: I work there)

Re:Email: Explained from First Principles by icedchai on Tuesday February 21, 2023 @05:05PM (#34888248)
I have some procmail rules set up that sends most of that stuff to a different mailbox that I never look at.