On 6/19/20 10:41 AM, Todd Herr wrote:
> On Fri, Jun 19, 2020 at 1:23 PM Dotzero <dotz...@gmail.com
> <mailto:dotz...@gmail.com>> wrote:
>
>
>
>     On Fri, Jun 19, 2020 at 1:09 PM Jim Fenton <fen...@bluepopcorn.net
>     <mailto:fen...@bluepopcorn.net>> wrote:
>
>         On 6/19/20 6:06 AM, Douglas E. Foster wrote:
>         > DMARC helps establish a verified identity.  Delivery is based on
>         > reputation.  The two are very different. 
>         >
>         > Unwanted mail with DMARC validation will be blocked on the
>         same basis
>         > is unwanted mail without it.
>         >
>         > But a verified identity is helpful for ensuring that wanted
>         mail is
>         > not blocked.
>
>         A verified identity is established by DKIM and/or SPF. What is
>         DMARC
>         adding in this respect?
>
>     Policy expressed by the  domain owner/administrator based on some
>     combination of DKIM and/or SPF and the feedback loop.
>
Both policy and the feedback loop are actions taken on the basis of
verification of the identity (or lack thereof). They do not establish
the identity themselves.
>
> Not only that, but DMARC is the only one of the three that is
> necessarily tied to the domain in the (usually) visible in the MUA
> From header.
>
That comes back to the question of whether the domain in the From header
is visible in the MUA, and if visible, does it alter user behavior
(e.g., discourage users from clicking phish links). Different people
have different opinions on that. A couple of messages back on this
thread, the blocking of email was discussed and that does not relate to
visibility of the domain in the MUA.

-Jim


_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to