Re: [dmarc-discuss] Email encryption services and DMARC

2018-07-11 Thread John R Levine via dmarc-discuss
On Wed, 11 Jul 2018, John R Levine wrote: If you're going to have a third party send mail for you, why can't you just list the third party IP address in your SPF record? Oh, wait, I got it backward. On the outbound mail, you're right, it's the customer's domain so they can add the IP to

Re: [dmarc-discuss] Email encryption services and DMARC

2018-07-11 Thread Jerry Warner via dmarc-discuss
It sounds to me like the bounce address is the third-party provider and there's no DKIM signature, so there's nothing for DMARC to align with. Sounds to me like the answer is that if you're going to let a third party send mail for you, it'd be a good idea to enable the third party to put on

Re: [dmarc-discuss] Email encryption services and DMARC

2018-07-11 Thread John Levine via dmarc-discuss
In article <3fe159fb-7de2-b823-2665-bcf985b6c...@rolandturner.com> you write: >Can you show sample/likely envelopes/headers that would cause the >problem? It's not clear from your description why there's a problem. Are >you saying that Cisco is running a service that impersonates author

Re: [dmarc-discuss] Email encryption services and DMARC

2018-07-11 Thread Roland Turner via dmarc-discuss
Ivan, Can you show sample/likely envelopes/headers that would cause the problem? It's not clear from your description why there's a problem. Are you saying that Cisco is running a service that impersonates author (5322.From) domains of *_non_*-customers? - Roland

[dmarc-discuss] Email encryption services and DMARC

2018-07-11 Thread Ivan Kovachev via dmarc-discuss
Hello all, I have a question regarding third-party email encryption services and DMARC. For example, when using Cisco CRES the emails contain the From domain of the sender and the Return-Path is that of the sender so if they authorize Cisco CRES then emails will pass SPF and align with regards