<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Fromenance blog</title>
    <link>https://fromenance.com/blog</link>
    <atom:link href="https://fromenance.com/rss.xml" rel="self" type="application/rss+xml" />
    <description>Notes from Fromenance on communication provenance: email authentication, phishing, verify codes, and what institutions can prove about the messages they send.</description>
    <language>en-us</language>
    <lastBuildDate>Sun, 27 Sep 2026 12:00:00 GMT</lastBuildDate>
    <image>
      <url>https://fromenance.com/brand/fromenance-mark-solid-128.png</url>
      <title>Fromenance blog</title>
      <link>https://fromenance.com/blog</link>
    </image>
    <item>
      <title>The phone call my mother made</title>
      <link>https://fromenance.com/blog/the-phone-call-my-mother-made</link>
      <guid isPermaLink="true">https://fromenance.com/blog/the-phone-call-my-mother-made</guid>
      <description>Fromenance exists because of one email, one copycat page, and one phone number. The founder's account of the scam that took thousands of dollars from his mother, and why communication provenance is the answer he could not find that day.</description>
      <pubDate>Sun, 27 Sep 2026 12:00:00 GMT</pubDate>
      <dc:creator>George Rios</dc:creator>
      <category>founder</category>
      <category>communication provenance</category>
      <category>vishing</category>
    </item>
    <item>
      <title>When attackers copy the verify footer</title>
      <link>https://fromenance.com/blog/when-attackers-copy-the-verify-footer</link>
      <guid isPermaLink="true">https://fromenance.com/blog/when-attackers-copy-the-verify-footer</guid>
      <description>Attackers will copy an institution's verify footer into their lures. Fromenance communication provenance is designed for that: the code is bound to one registration and one recipient, so a copied footer fails and hands the lure to the fraud team.</description>
      <pubDate>Tue, 22 Sep 2026 12:00:00 GMT</pubDate>
      <dc:creator>George Rios</dc:creator>
      <category>replay</category>
      <category>threat model</category>
    </item>
    <item>
      <title>What survives an email forward</title>
      <link>https://fromenance.com/blog/what-survives-an-email-forward</link>
      <guid isPermaLink="true">https://fromenance.com/blog/what-survives-an-email-forward</guid>
      <description>Fromenance matches forwarded messages against a communication provenance registry, so it matters exactly what Gmail, Outlook, Apple Mail, and a Proofpoint gateway do to a message on the way through. Here is what survives and what does not.</description>
      <pubDate>Thu, 10 Sep 2026 12:00:00 GMT</pubDate>
      <dc:creator>George Rios</dc:creator>
      <category>matching</category>
      <category>fingerprinting</category>
    </item>
    <item>
      <title>Why DMARC passes on phishing</title>
      <link>https://fromenance.com/blog/why-dmarc-passes-on-phishing</link>
      <guid isPermaLink="true">https://fromenance.com/blog/why-dmarc-passes-on-phishing</guid>
      <description>Fromenance explains a communication provenance basic: a lure from a lookalike domain passes SPF, DKIM, and DMARC because those controls authenticate the attacker's domain, not your message.</description>
      <pubDate>Mon, 31 Aug 2026 12:00:00 GMT</pubDate>
      <dc:creator>George Rios</dc:creator>
      <category>dmarc</category>
      <category>email authentication</category>
    </item>
    <item>
      <title>Communication provenance explained</title>
      <link>https://fromenance.com/blog/communication-provenance-explained</link>
      <guid isPermaLink="true">https://fromenance.com/blog/communication-provenance-explained</guid>
      <description>Communication provenance is sender side evidence that an institution issued a specific communication to a specific recipient. Fromenance explains the primitive, how it differs from authentication and detection, and why it produces a definitive answer.</description>
      <pubDate>Tue, 18 Aug 2026 12:00:00 GMT</pubDate>
      <dc:creator>George Rios</dc:creator>
      <category>communication provenance</category>
      <category>category</category>
    </item>
  </channel>
</rss>
