Spoofing is an identity design failure, not just a vigilance test
The burden of detecting spoofing should not sit solely with recipients. High-risk services need trusted routes for authorising consequential actions separately from unsolicited messages.
Read More