On Wed, Jul 29, 2026 at 10:55 AM Richard Clayton <[email protected]> wrote:
> > >Should alignment be satisfied if any valid signature in the chain aligns > with > >the From domain, or should the chain semantics introduce a different > >interpretation? > > You are of course asking a question about DMARC not about DKIM2 -- and > some people think that DMARC is not actually needed any more because > what it is trying to protect is protected by the chain-of-custody -- so > the only value DMARC has is the reporting features > Not to put too fine a point on things, but unless and until RFC 9989 is updated to include DKIM2 as an Authentication Mechanism ( https://www.rfc-editor.org/rfc/rfc9989.html#name-authentication-mechanisms), DKIM2 plays no role in DMARC. As far as I'm aware, there is no IETF working group currently chartered to update DMARC to include DKIM2, and I would not assume that such a working group would conclude its work quickly and cleanly. That said, in my opinion, alignment between a DKIM2 signature domain and the RFC5322.From domain would have to be something checked at the origination point of the message, but I am one of those people who think that once DKIM2 is widely deployed, DMARC won't be needed anymore save perhaps for its reporting features. -- Todd
_______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
