Michael Reeder -- Hygeia MS writes:

 > *For now -- problem solved!**

Good news!

 > I will take a look at Mark's DMARC mitigations below also.

You may also want to ask Dreamhost if they can enable the ARC protocol
for your host.  This protocol allows your host to testify which
authentication tests passed on the way in, in particular DMARC's "From
alignment".  This means that the host takes responsibility for the
changes in the message (such as adding a list name tag in Subject or a
footer explaining how to access list resources, which break DKIM
signatures).

The difference between using ARC and the DMARC mitigations Mark
mentions are

1.  ARC allows your list to leave From as is, while the Munge_From
    options change From to point to your list, instead.  "Munge From"
    may confuse some subscribers (or their filtering and sorting
    software), although that's usually not a problem.

2.  ARC requires that the final recipient participate in the protocol.
    Most of the largest freemail sites support it.  On the other hand,
    "Munge From" allows your site to authenticate itself, since it
    DKIM signs and From is the same domain as the signature.

Which is better depends on the tradeoff between some inconvenience for
subscribers who want to reply to author only when From is munged, and
the risk of having sites that don't participate in ARC bouncing your
traffic.

If you aren't getting DMARC bounces already, I would suppose ARC would
be good insurance against some (but not all) DMARC bounces in the
future.  If you are, you might want to go straight to Munge From
rather than try ARC and hope it fixes them for all current and future
recipient hosts.

Steve
------------------------------------------------------
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
    https://mail.python.org/archives/list/mailman-users@python.org/

Reply via email to