On 10 Apr 2016, at 20:00, Curtis Villamizar wrote:
Great anecdote of a really bad email setup but ...
For a lot of us missing out on Ditech, a specialist in preditory
lending, is not a compelling reason not to enable SPF, DKIM and DMARC.
The power of a brand shows itself...
Whether or not one approves of the company that now owns and
inexplicably chose to revive the Ditech brand name recently is
irrelevant, as are the predatory practices of GMAC when they existed and
owned that brand. People with conventional "prime" mortgages don't
really have any say in who services their loan from one year to the
next: the servicing rights become a highly liquid market commodity once
Fannie or Freddie holds the actual loan.
My point was that there are companies that people cannot readily choose
to not do business with who send mail in ways which indicate that they
have tried but very much failed to adhere to modern security standards.
On a system where you know enough about all your users to know that they
don't want to get critical email from clueless sources, you can make
restrictive choices with no trouble. If you don't actually know that,
choosing to require senders to use rigorous security correctly will
often lead to unpleasant surprises.