天空вℓσи∂ [Unemployed edition] @skyblond@social.cleverlibre.org

Several days ago I said "Learn as I need" on my résumé.

Today I read someone describes himself as "self-taught".

That's essentially the same thing but definitely sounds better.

R.I.P. 😢

陈皓在很多方面都是我的一个榜样，他的正直和勇气在一定程度上也造就了今天的我。只是没想到，意外比昨天来的更早一些。

Chen Hao was a role model for me in many ways, and his integrity and courage to some extent also shaped who I am today. It's just that I didn't expect the accident to come even earlier than his yesterday.

----
https://twitter.com/ghosTM55/status/1657946836643241985

Yeah, that's fosh.
----
I Convinced A Famous Orchestra To Let Me Play The Triangle
by Max Fosh
https://www.youtube.com/watch?v=BsDUFldv6Bk

【歪门邪道】从垃圾邮件谈电子邮件的认证机制
https://skyblond.info/archives/1015.html

就今天看到的那个垃圾邮件临时起意写了一篇文章。顺便把自己的邮箱也更新了一下，上了dkim和dmarc，效果拔群。

In practice, when an email system encounters a CNAME, it will follow the CNAME and query the target's TXT to find out the SPF rules.

But I didn't find an RFC document that clarifies this behavior. Hmmmm

虽然这个邮件看起来特别真，甚至还给出了学信网官方的客服邮件地址和通信地址，但邮件中还是留下了微信和qq号。我觉得很有可能在加了微信之后，对方会给你一个不一样的地址，告诉你通信地址和办公地址不一样之类的理由。

总之在原始数据中暴露的一点就是mailer。我找到了之前学信网给我发过的邮件，域名是“appmail.chsi.com.cn”，使用的mailer是Microsoft Outlook 16.0，并且通过了spf和dkim验证。

这封被标记为spam的邮件没有通过spf和dkim（这是被标记为spam的主要原因），并且mailer是“EhooPost 2004b”，我查了一下这个东西：亿虎邮件群发大师。

这他妈有点假的没边儿了哈哈哈

虽然我觉得学信网应该从quarantine改成reject，但是我自己设置dmarc的时候也设置的quarantine，主要还是想万一哪天这套设置炸了，不至于连邮件都发不出去

Configured DKIM and DMARC for my domain. The PrivateEmail is working fine (only requires to setup DKIM manually), and the SendGrid workings with those security settings out-of-box.

Great. Now all I left is to figure out my GPG password.

Just noticed now PrivateEmail support DKIM. I started using their service since 2017, and at that time, only SPF is supported.

Still don't know how to set up DMARC, but I think with DKIM, nobody can send email on my behalf anymore.

今天看邮件的时候突然发现了这一封被ESET标记为SPAM的邮件。乍一看好像挺厉害，域名什么的也都对应的上。但是之前也发现过有邮件冒充我自己的域名给我自己发邮件，但很明显我的域名只有我一个人用。

看了一眼原始数据：
dmarc=fail reason="No valid SPF, No valid DKIM" header.from=chsi.com.cn (policy=quarantine);

这学信网还是不行啊（