Why coronavirus scammers can send fake emails from real domains

Here's a very simple and straightforward explanation of how "Organizations like the WHO could prevent domain spoofing, but many don’t," by Joss Fong and Cleo Abram for Recode. If you know about DMARC, you already know what's going on here, but it's still an important read. Hopefully it'll drive further DMARC adoption.

[H/T: Brian Westnedge.]