From Dev.to
Anyone can write “From: bank.com” in an email. Here’s how Gmail catches the fake.
TL;DR: SMTP was born in 1982 with no sender check. Today Gmail runs 3 checks before an email reaches your inbox: SPF, DKIM and DMARC. SPF and DKIM alone are not enough. DMARC is what stops the scam. L...