On 12/14/22 3:46 PM, Jim Fenton wrote:
On 13 Dec 2022, at 17:00, Michael Thomas wrote:
Which brings up a question: even though they pass on DKIM they should fail on
SPF, right? For transactional email that seems like a big old red flag, right?
Some people use receive-side forwarders (e.g., college alumni addresses) to
have a consistent email address if they change ISP. That will, completely
legitimately, cause SPF failures on transactional email.
There are tons of other options these days. But I really wasn't talking
about that part. It's what happens before it gets forwarded. If it
arrives in a giant bcc where SPF fail and the domain normally passes,
that seems like a red flag.
Mike
_______________________________________________
Ietf-dkim mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-dkim