On 8/20/2017 7:47 PM, Bron Gondwana wrote:
On Mon, 21 Aug 2017, at 09:34, Hector Santos wrote:
On 8/18/2017 8:53 PM, Bron Gondwana wrote:
...
And the message still arrives at receiver with a valid ARC
chain, just
via badsite.com instead of site3.com.
The same receiver? If so, wouldn't this be a duplicate message when
the same receiver can see the same 5322.Message-Id?
There is nothing stopping you changing the 5322.Message-Id - it's not
encoded in the AS or AAR.
It is protected by the original DKIM-Signature. Message-Id is pretty
high on the recommended hashed header list.
But if the original DKIM signature was lost, all bets are off and
nothing else matters unless ARC is attempting to replace DKIM which
you just illustrated it is quite easy to create alternate paths, even
when its not all to the same final destination.
--
HLS
_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc
