On Thu 11/Oct/2018 01:39:55 +0200 Shal F via dmarc-discuss wrote: > >> However, if the eventual goal is for everyone to be using DMARC and >> generating emails that pass DMARC, then either rewriting headers or >> resigning messages with ARC is eventually going to be required for >> every email message that transits a third-party server ... shouldn't >> we be swallowing that bitter pill and doing the rewriting or adding >> ARC signatures so that users get used to the "degraded" experience >> that they're going to have to tolerate in the future in exchange for >> making email more secure for everyone? > > The point of ARC is that the end users won't have a degraded experience > because > the headers need not be rewritten. Absent it, or something like it, they > would.
Most probably they will. ML operators who want to reach ARC-ignorant domains will continue to rewrite From:. > That's why I suggested that mailbox providers hold off at least until we see > if > ARC is going to work. A better suggestion would be to amend ML specifications so as to produce a good user experience in the time of DMARC. >> ARC is not going to work for them because how are they going to >> convince behemoth sites like Gmail, AOL, Yahoo, etc., to trust their >> ARC signatures? > > I don't think the big players like Gmail will have a problem inferring which > ARC signers to trust - they'll likely get enough signal from their email > traffic, even from smaller list services. The problem will likely be mostly > for > smaller mailbox receivers to figure it out. +1. Mailbox providers are divided into two broad categories, those who track domain reputation and those who don't. ARC allows to ascribe reputation taking into account forwarded mail. I don't think it will make life much different for ML rewriting From:. Best Ale -- _______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
