New subject: Two more DMARC mitigations

June 13, 2014


      Jim Popovitch writes:
...
Unless I am mistaking things, the sheer irony here is that Yahoo's
bastardized version of DMARC, which is necessary to stave off
collateral damage from their past security breach(es?), needs to be
further augmented with even less user security in order to be secure.
I don't see why the OAuth version of John's proposal would be less
secure.
If you want real irony, look no farther than Yahoo! Groups' From:
header field.  Yahoo! is using DMARC to get "yahoo.com" out of the
From: field in list traffic, and Groups is putting it right back in.

Re: [Mailman-Developers] Two more DMARC mitigations

Stephen J. Turnbull

Barry Warsaw

Barry Warsaw

tags

participants (2)