Here's a very simple and straightforward explanation of how " Organizations like the WHO could prevent domain spoofing, but many don’t ," by Joss Fong and Cleo Abram for Recode . If you know about DMARC, you already know what's going on here, but it's still an important read. Hopefully it'll drive further DMARC adoption. [H/T: Brian Westnedge .]