Those of you who proactively whitelist, thank you for using your brain. This comment is not directed at you.
As a former tech/cust support worker, I hate challenge-response systems. The usual scene is this: (1) support@company.com gets an email (2) I respond via my address, djeikyb@company.com (3) I get a challenge-response email and have to jump through a bunch of hoops to get permission to email the bastard who initiated the exchange.
And perhaps some people think that whitelisting support@company.com is enough, when really they should whitelist the entire domain. It's common that email to a general address is parceled out to individuals.
As a former tech/cust support worker, I hate challenge-response systems. The usual scene is this: (1) support@company.com gets an email (2) I respond via my address, djeikyb@company.com (3) I get a challenge-response email and have to jump through a bunch of hoops to get permission to email the bastard who initiated the exchange.
And perhaps some people think that whitelisting support@company.com is enough, when really they should whitelist the entire domain. It's common that email to a general address is parceled out to individuals.