undefined | Better HN

0 pointsbboygravity2y ago0 comments

I run a small org (freelancer) and I have a super advanced bullet proof set of solutions against this. Any 1 of those should do the trick (I do all of these):

1. Don't trick people into signing up for mailinglists.

2. Don't spam.

3. Don't use mailinglists.

My small business is fine.

0 comments

4 comments · 1 top-level

spacebanana72y ago· 3 in thread

Not against a targeted attack like the one described.

A clickfarm marking password reset emails as spam could create real harm.

Even a malicious individual doing this to 2-3 fair transactional emails could cause damage for a small business with low volume.

jeromegv2y ago

The attack described could not work with a strict DMARC policy.

However of course, most small companies have no idea how to do SPF/DKIM/DMARC.

pc862y ago

Nobody is spoofing anything, DMARC won't help. This is marking legitimate emails as spam at scale to trigger actual spam controls against the legitimate organization.

spacebanana72y ago

Could you explain how DMARC would prevent this?

If I attempted to create dozens of accounts on a website, trigger password resets emails, and report them as spam, where would DMARC prevent me?

j / k navigate · click thread line to collapse