It appears that Cyril - ImprovMX via mailop <cy...@improvmx.com> said: >Now, I wonder. Can I trust Microsoft that if they send an email on behalf of >aotearoa.energy, they initially >validated the ownership or is there a way to bypass that?
tl;dr It's self service with, as far as I can tell, no validation at all. In my experience, mail from whatever.onmicrosoft.com is overwhelmingly phishes and spam. Anyone with a real business should be using their own domain to send mail from MS 365 rather than an onmicrosoft one. R's, John _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop