On Tue, Jul 15, 2014 at 01:44:56PM -0700, Dave Crocker wrote:
Incurring the considerable expense, in people and opportunity cost, by
pursuing a global standards effort that proves ineffective is a
particularly pernicious path, especially with respect to a
security-related topic like phishing.
Is there quantitative evidence that preventing spoofing of the
"From" address reduces the efficacy of phishing? My guess is that
any such effect is rather marginal, and that phishers succeed or
fail based on the content of the pitch, rather than "metadata".
--
Viktor.