Email security is (still) brittle, and one of the biggest transactional email providers is very, very bad. Great talk at DEF CON 13 by @byt3bl33d3r https://www.youtube.com/watch?v=NwnT15q_PS8