Does ASSP actually check alignment when using DMARC?
 
I've sent a mail through ASSP with an obvious fake header "From:". The (header) domain has a DMARC entry, ASSP reports "DMARC pass".
If this was checked like the specification asks us to, it should not pass.
 
I've looked inside the code shortly and did not find anything that points in the direction of alignment checking.
Is this a desired behaviour so we don't get too many false positives? If that's the case I think it would be nice to have an option for the user to enable alignment checks.
There also exists a DMARC module for perl. One could probably use that (we're already using modules for DKIM and SPF, so why not).
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to