On 14 June 2017 at 20:51, Laura Atkins <la...@wordtothewise.com> wrote:
> Gmail doesn’t say it’s spam. Gmail says: This message may not have been > sent by: <email address> > Isn't this what DMARC/SPF/DKIM are intended for and at a very larger scale? BTW please note that the message is "sent from your account." not "by <email address>", so a very specific case. I would have been less surprised if they showed this message for EVERY dmarc failing message (not for that specific use case). Do you really see a lot of spam (not already filtered by a spamhaus check) using the same from and to? Is there a recent spike? (this would explain the google move). I hardly can find some occourence in a million spam messages. I thought it could have been related to their "recent" ARC implementations, but it doesn't seem to be related. In my test it did place the mail in the spam folder, but I’m not willing to > say that every message so marked will end up in spam. Gmail’s filters are > way more complex than that. > I can confirm in my test this kind of email ends in the priority tab, but with a warning, even in a "virgin" gmail inbox, sending the email from a "good reputation IP/domain" (according to GPT). Just to be sure I'm not being misunderstood I'm not saying this from=to doesn't have correlation with phishing. It simply feels to me a very shy target in 2017 where SPF/DKIM/DMARC are available (unless I'm missing a big thing, and I've opened this discussion because I never exclude it). This doesn't harm me, I trust google and I try to understand what's behind their moves because I think there's always something to learn from others :-) Stefano
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
