Gmail has a blackbox ML that takes SPF and DKIM into account, but with a certain scoring that might not matter that much compared to said IPs reputation in their system.
> SPF attests that the mail was sent by an IP address that is authorized to send for a certain domain. Yes, but SPF ties the IP address only to the Sender address (MAIL FROM) - so utterly useless in stopping phishing…
Gmail has a blackbox ML that takes SPF and DKIM into account, but with a certain scoring that might not matter that much compared to said IPs reputation in their system.
> SPF attests that the mail was sent by an IP address that is authorized to send for a certain domain. Yes, but SPF ties the IP address only to the Sender address (MAIL FROM) - so utterly useless in stopping phishing…