explore ways to detect whether emails are automated and filter based on that

[kmahar]

for example, account confirmation emails when you sign up for a new website - that will almost definitely be from an unknown sender, but you might need to see it immediately to access your account. similarly, password reset links, financial info, order confirmations...

I'm hesitant to do anything too automated here, but alongside the shared blacklist feature (#13) we could create shared whitelists. and maybe ourselves create a specific case of that, a whitelist of DKIM/DMARC-using domains that send a lot of automated emails and sign them correctly (for example amazon.) and then we only approve emails from those domains if they pass the sender verification tests