DKIM Deployment

[Leif Johansson <>]

>
> What about when that phishing attempt comes from a trusted domain? It
> doesn't help much in that situation, and depending on how we decide to
> handle signed mail, it may be counter productive.
>
> For the vast majority of cases, your statement would hold true though.
>

So how about:

Email users want a clear indication that the sender domain was not forged in 
order to detect phising attempts based on domain forgery.

(its important to get a user story right)

        Cheers Leif

Attachment: signature.asc
Description: This is a digitally signed message part.