On 2023-03-20 at 13:54:42 UTC-0400 (Mon, 20 Mar 2023 13:54:42 -0400) Mark London <m...@psfc.mit.edu> is rumored to have said:
I’ve never seen a false positive with USER_IN_DEF_SPF_WL.
It can happen, particularly when a listed domain changes the way they send email. I'm not sure I understand exactly what Dropbox is doing here or how it is possible for a user to masquerade as PayPal, but I suspect this is a new service of some sort.
N.B.: h.reindl replies directly to some messages on this list (which is publicly archived) but he cannot post to the list due to a uniquely unhelpful history.
-- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire
