On Sun, Sep 14, 2014 at 12:36:02AM -0700, Wei Chuang wrote:
I doubt my personal view are going to change any opinions here, but if you
could put yourselves in the mindset of the engineers trying to fight
phishing attacks at large scale that were damaging the reputation of their
service you might see things differently.
Those engineers should focus first on the abuse that's coming *from*
or supported by their own operations, not on the abuse directed at them.
In the case of some of the providers involved in the DMARC debacle,
they've spent many years studiously pretending that the problem is external
when in fact much of it is internal and when they've tried their
very best to block, ignore or discard problem reports concerning it.
---rsk