And again from my non-Google account, hoping I didn't get people kicked off
the list again....

On Tue, Sep 19, 2017 at 2:56 PM, Brandon Long <bl...@google.com> wrote:

> Google is now using ARC results for local policy DMARC passes.  This
> should be visible in your DMARC rua reports as "arc=pass" in the local
> policy comment field.
>
> This should replace most instances in your reports of xoar=pass.  There
> are still some cases where xoar passes and arc does not, mostly because
> xoar is always the last hop and replaces any existing one, so it works in
> cases where the arc chain breaks.
>
> Ie, arc would need the ability to restart broken chains to be equivalent,
> though it's not clear that the extra covered cases would be that useful,
> definitely edge cases.
>
> If/when some other major sites like ietf.org enable arc signing, we can
> add them to the whitelist.
>
> Automated trust is going to require a larger rollout to be effective, and
> we haven't started working on that yet.
>
> Brandon
>
_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to