[conspire] (forw) Re: Email( spoofing)
Rick Moen
rick at linuxmafia.com
Fri Aug 19 16:55:28 PDT 2022
Quoting Paul Zander (paulz at ieee.org):
> A bogus email is less annoying than spam phone calls. A week or two
> ago, I received 8 phone calls all from "unavailable". All left voice
> mail saying it was Amazon calling about an order for an iPhone. Press
> #1 to confirm; Press #2 if I didn't place the order.
tl;dr: Incoming voice calls (and CallerID[1]) are unauthenticated.
Everything else flows naturally from that.
[1] The IETF SHAKEN/STIRRED auth. protocols should remediate this
partially, as it gets rolled out, but CallerID still should not be
relied upon.
More information about the conspire
mailing list