Re: [dmarc-ietf] making mail not work for your users, was the endless mailing list silliness

[Michael Adkins <[e-mail]>]

If your goal is to profit from identity theft by impersonating someone
else, your best bet is to cast the widest net possible by impersonating
the largest organizations that hold user authentication credentials.
DMARC is an open version of products that were designed to combat that
problem because it was/is the biggest phishing problem.  If there was no
value to actual email users, it is unlikely that the largest mailbox
providers on the internet would have participated in it's creation or
deployed it since there would have been nothing in it for them.  If we
would like to hear about the value to end users, we could probably get one
of them to share some high level data about it.

On 4/17/13 1:55 PM, "J. Gomez" <[e-mail]> wrote:

>On Wednesday, April 17, 2013 12:39 PM [GMT+1=CET], John Levine wrote:
>
>> Perhaps we could try and think more clearly about providing service to
>> actual mail users and less about hypothetical spoofing attacks on
>> people who are not plausible spoof targets.
>
>It's pretty clear by now that DMARC is not about protecting actual email
>users, but about protecting big brands from email spoofing their brand.
>
>Regards,
>
>J. Gomez
>
>_______________________________________________
>dmarc mailing list
>[e-mail]
>https://www.ietf.org/mailman/listinfo/dmarc