A assumed that email sent to G Suites addresses was protected by DMARC. Am I (1) wrong, (2) was this email really sent from someone inside Amazon, or (3) is there some other explanation?
Conversation
This Tweet was deleted by the Tweet author. Learn more
In this case, it's DMARC for amazon.com that matters, since that's the domain that this email is (claiming to be) from.
1
2
Right. I just assumed that both Amazon and Google would use demarc religiously. Am I wrong? Is there anything I can do on my end to enable it?
2
As far as I know, they do, and Gmail should be enforcing it. I'm as clueless as you are about whether this is actually a valid email from Amazon. It could also be an email that's actually from Amazon but via a compromised email account. Could check the DKIM signature yourself.
Select 'Show original' in the drop-down menu for the email message and you should see information from Google's servers about the results of DKIM verification, etc. in the headers.