[dmarc-discuss] RUA validation

[Murray S. Kucherawy]

> -----Original Message-----
> From: dmarc-discuss-bounces at blackops.org [mailto:dmarc-discuss-bounces at blackops.org] On Behalf Of David F. Skoll
> Sent: Tuesday, January 31, 2012 1:42 PM
> To: dmarc-discuss at dmarc.org
> Subject: Re: [dmarc-discuss] RUA validation
> 
> > The issue then is that a storm of mail pointing to fake reporting
> > addresses like this causes a DNS storm against example.org.
> 
> That is a bit of a problem, but any attacker who can send large volumes
> of messages could just as easily (actually, more easily) create a DNS
> storm directly against a victim domain.

That's direct; DMARC enables something distributed.