Re: [dmarc-ietf] non-mailing list use case for differing header domains

[Dave Crocker <[e-mail]>]

On 8/7/2020 7:32 PM, John Levine wrote:
> I would be interested to better undertstand the meaning of "need"
> here. It is my impression that most people vastly overestimate how
> much of a phish target they are. Paypal and big banks certainly are,
> other places, a lot less so.


I suspect the calculus is less in the pragmatic terms of asking how big 
this threat is and more in terms of wishing for some version of 
protection and thinking this helps to achieve it.

The degree to which so many folk embrace does not appear to have that 
much empirical basis, but rather a sense of feeling a need to do 
something and at first blush this seems to be something.

d/

-- 
Dave Crocker
Brandenburg InternetWorking
bbiw.net