Recent Posts

Evolution of policy

• laura
• Industry

Last week, I talked about policy, using some different blocklist policies as examples. In that post I talked about how important it is that policy evolve. One example of that is how we’ve been evolving policy related to companies that get listed on Purchased Lists and ESPs. Who is listed has evolved over time, and we’re actually looking at some policy changes right now.

Security Truths

• laura
• Industry

Being in infosec for so long takes its toll. I've come to the conclusion that if you give a data point to a company, they will eventually sell it, leak it, lose it or get hacked and relieved of it. There really don't seem to be any exceptions, and it gets depressing.

Read More

Thoughts on policy

• laura
• Industry

A particular blocklist, once again, listed a major ESP this week. Their justification is “this is our policy.” Which is true, it is their policy to list under these circumstances. That doesn’t make it a good policy, or even an effective policy. It’s simply a policy.

Complaints, contacts and consequences

• laura
• Industry

Yesterday the CRM system Zoho suffered an unexpected outage when their registrar, TierraNet suspended their domain. According to TechCrunch, Zoho’s CEO says there was no notification to the company and that the company had only 3 complaints about phishing.

Hitting the ground running

• laura
• Industry

We’ve landed in Dublin and are back at work. Blogging will pick up as I get back into the swing of things.

Changes are coming…

• laura
• Industry

We’ve been blogging here about email for 11 years now. My first post was published August 29, 2007. In that time, we’ve published more than 2300 posts, and written probably millions of words. For years we have blogged multiple times a week.

Check your abuse addresses

• steve
• Technical

Even if you have excellent policies and an effective, empowered enforcement team you can still have technical problems that can cause you to drop abuse mail, and so lose the opportunity to get a bad actor off your network before they damage your reputation further.

Can I get access to Google Postmaster tools if I’m using an ESP?

• laura
• Industry

The answer is almost certainly yes, but there are definitely cases where it the answer is no.

Your idea will not work. Here is why it won’t work.

• steve
• Industry

Matthew Green reminded me of an old bit of spam lore.

The Problem With Affiliates (2)

• steve
• Technical

On Friday I mentioned spam coming from a BarkBox affiliate programme.