←back to thread

Spammers are better at SPF, DKIM, and DMARC than everyone else

(toad.social)
429 points pabs3 | 1 comments | 25 Mar 25 08:14 UTC | HN request time: 0.206s | source
Show context
riobard ◴[25 Mar 25 11:17 UTC] No.43469919[source]▶
The point of SPF/DKIM/DMARC is to bind emails to domains, so no more spoofing. It is naive to expect authentication alone can reduce spams.
replies(4): >>43469940 #>>43470124 #>>43470532 #>>43470789 #
1. jeroenhd ◴[25 Mar 25 11:22 UTC] No.43469940[source]▶
To be fair, SPF saves mail.ru and outlook.com users from five, maybe six spam emails per month coming from my domain, based on DMARC reports. If those numbers scale to include every domain on the internet, that's a huge amount of spam being filtered out very easily and very early.

You'd think spammers would've learned to avoid SPF domains at the very least but they haven't, so despite SPF/DMARC/DKIM failing to get anyone out the spam folder, the technology is still catching spam bots.