On 23/12/2022 08:22, Alessandro Vesely wrote:
On Thu 22/Dec/2022 19:40:57 +0100 John Levine wrote:
It appears that Alessandro Vesely <vesely@xxxxxxx> said:
I suspect that that /designating an address/ as wanted is an ill
conditioned filter leftover from the early anti-spam filtering attempts.
It's common for spam filters to use the recipient's address book as a
sender whitelist. It's not perfect, since it also needs to deal with
situations where the sender is faked, or the real sender's account is
compromised, but it works pretty well.
Used to work well until spammers found ways to steal address books.
If they were, users would be designating a signing domain or an
emitting domain, not an email address, as wanted.
I doubt that one mail user in 10,000 has any idea what a signing
domain or
an envelope address is. Not gonna happen.
On the one hand they harass us with 2FA and on the other hand they don't
recognize the value of email authentication? I think, by now, the
concept of digital signature is understood by the majority of the
people, isn't it?
No. Tech wizzies may be but the people I work with in a scientific
institution, no. They have heard of encryption and know that it is a
good thing and that accessing a website with encryption is safe (the
poor deluded fools) but hash, signing and such like no way.
Tom Petch
Best
Ale
.
