After 30 minutes, I think that I get to keep my card. @Ally, you might want to talk to your fraud prevention partner about NOT sending emails asking people to click links to verify transactions -- especially if those messages don't fully authenticate.
Authentication is ok, other data is more timely and better S:N, getting any large corporation properly authenticated is very difficult, and cousin (look-alike domains) autheticate perfectly well. Spamtraps, user complaints, logs (web and mail), passive DNS and SSL Cert logs 1/2
-
-
2/2 there is no shortage of telemetry that is as-good, or better. What authetication does is offer a positive affirmation that mail really is from a given source. That’s good too.
-
Yes, but as a RECIPIENT, I don't get access to that telemetry. What I do have are headers that say things like "softfail" when authentication is checked. What I can reasonably check will sometimes change depending on what I'm doing.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.