←back to thread

Spammers are better at SPF, DKIM, and DMARC than everyone else

(toad.social)
429 points pabs3 | 1 comments | 25 Mar 25 08:14 UTC | HN request time: 0s | source
Show context
badmintonbaseba ◴[25 Mar 25 11:21 UTC] No.43469939[source]▶
Naively I thought that one value proposition of SPF, DKIM and DMARC is that reputation shifts from based on IP to be based on domain, once you set these up correctly. So as long as you can maintain a good reputation for your domain and have SPF, DKIM and DMARC correctly set up, then you can host your SMTP server at any IP and your emails will get delivered.

I wonder why it doesn't work this way.

replies(5): >>43469948 #>>43470191 #>>43470827 #>>43471724 #>>43473829 #
1. WhyNotHugo ◴[25 Mar 25 12:00 UTC] No.43470191[source]▶
IMHO, their main advantage is that third parties can’t send email which appears to originate from my domain.

I configure my domain to use SPF, so now spammers can’t sign it properly.

However, the fact that an email passes SPF verification only ensures that it was authorised by the domain owner. It doesn’t say anything about whether the domain owner is a spammer.