The intent of DMARC is to cause emails to silently vanish. Ideally deploying DMARC would cause all malicious email that uses your domain in the From address, but which has absolutely nothing to with you to vanish, while still allowing all email you send, including mail that was sent through third parties or forwarded, to be delivered. For some organizations you can get really close to that ideal...
List the world!
We often say that a blacklist has “listed the world” when it shuts down ungracefully. What exactly does that mean, and why does it happen? Blacklists are queried by sending a DNS lookup for an A record, just the same as you’d find the address of a domain for opening a webpage there. The IP address or domain name that’s being queried is encoded in the hostname that’s...
SpamCannibal is dead
The SpamCannibal blacklist – one that didn’t affect your email too much but which would panic users who found it on one of the “check all the blacklists!” websites – has gone away. It was silently abandoned by the operator at some point in the past year and the domain registration has finally expired. It’s been picked up by domain squatters who, as usual, put a...
#GDPR
Twitter has some opinions on #GDPR. — @rianjohnson (Yes, the director of The Last Jedi) Finds deserted island a message in a bottle washes onto the beach *opens bottle* We’ve updated our Privacy Policy — Marques Brownlee (@MKBHD) May 24, 2018 Happy #GDPR day! #gdprjokes pic.twitter.com/2SVisxIuRY — Luke Stevens (@lukestevens) May 24, 2018 just got a GDPR email from a company...
EFAIL PGP / S/MIME "flaw" ?
There’s going to be a lot of hype today about something the security researchers who found it are calling “EFAIL”. Interviews, commemorative T-Shirts, press tours, hype. The technical details are interesting, but the un-hyped end-user advice would probably be “If you’re using a mail client that’s got bugs in it’s MIME handling, and you’ve configured...
Dodgy PDF handling at Gmail
We sent out some W-9s this week. For non-Americans and those lucky enough not to have to deal with IRS paperwork those are tax forms. They’re simple single page forms with the company name, address and tax ID numbers on them. Because this is the 21st Century we don’t fill them in with typewriters and snail mail them out, we fill in a form online at the IRS website which gives us PDFs...
Laposte rejections
Update: The issue seems to have been resolved and Laposte say they’re no longer sending the 519 responses as of April 25th 2018. Laposte.net are having a bad couple of weeks. There’ve been reports from customers of their IMAP service being unusable, with attempts to move or delete messages timing out and expected emails simply not arriving. Several delivery friends have mentioned that...
GDPR and the EU and Opt-in Confirmation
There’s a lot of discussion going on about just what GDPR requires, and of who, and in which jurisdictions. German organizations in particular have been more aggressive than most about wanting to see opt-in confirmation for years and now seem to be adding “because GDPR” to their arguments. I’m still not sure how this is going to shake out, but I’m beginning to see...
A Minute of Email
Vala from Salesforce shared this infographic this morning.
(from Statista)
It estimates that in one minute on the 2017 Internet there were 25,000 tweets, 3.8 million google searches, 29 million SMS messages and 156 million emails sent.
Email is still a pretty vibrant messaging channel.
Spam isn't going away
I got a piece of B2B spam last week that showed in several different ways why spam isn’t going away any time soon. Systemic problems dealing with abuse at scale at Google. Ethics problems at Cloudflare. Problems dealing with abuse at scale at Amazon. Cultural problems in India, several times over. Buckle up. The spam content The spam email itself looks pretty much like any business email...