Hi

On 4/13/23 10:46, Andreas Heigl wrote:
DMARC is less of a concern, because the list apparently already performs
DMARC mangling for a policy that is not 'none'

Apart from (possibly) modifying the body and the subject line which then
breaks the DKIM signature which then breaks DMARC ;-)


I understand how DKIM and DMARC works. For users with a DMARC policy of quarantine or reject the list manager already performs DMARC mangling:

The 'From' header is changed from the original 'From' header and instead the list address is put there. Now the DMARC policy of the original sender no longer applies and instead the DMARC policy of the list is used (which does not exist).

You can see happening with the email from "Mikhail Galanin via internals" that was sent roughly 10 minute ago.

Best regards
Tim Dsüterhus

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: https://www.php.net/unsub.php

Reply via email to