For an ESP, did the DMARC rejects contains information not available
elsewhere, or "just" put several relevant pieces of information in one place ?
On Thu, 21 Nov 2019, Luke via mailop wrote:
DMARC rejects had great utility in my time working at an ESP. They would
have little or no utility for forwarded messages. It would be interesting
to see the spread of DMARC rejects for forwarded versus non forwarded
messages. Although it wouldn't change the fact that the responses are
indeed useful to many significant parties.
On Thu, Nov 21, 2019, 7:02 AM Steve Atkins via mailop <mailop@mailop.org>
wrote:
On 21/11/2019 13:10, Luke via mailop wrote:
????
One of the features of email is that it you can send responses back about
the status or handling of a message. Here's one such response from a gmail
server:
*550 5.7.1 Unauthenticated email from domain.tld is not accepted due to
domain's DMARC policy. Please contact administrator of domain.tld domain if
this was a legitimate mail.*
Matt is right. Bounces like this tend to get peoples' attention and it is
worth doing. Curious to learn more about what Rathbun said about not being
able to accomplish this at scale. The challenges involved in that are
beyond me but it does seem like Google is doing it.
The most common case for DMARC declining to accept legitimate messages are
because they've been forwarded (e.g. the tampering with the From: header on
this mailing list is an attempt at mitigation of one situation where that
happens).
Where do you think that 5xx message will be seen in the case of normal
email forwarding? Do you expect it to be converted by them to an
asynchronous bounce? Where do you expect that bounce to be delivered? Do
you expect it to be seen by humans? By automation?
Cheers,
Steve
Oh...And I'm certain Google also sent a DMARC report :P
On Thu, Nov 21, 2019 at 4:34 AM Andrew C Aitchison via mailop <
mailop@mailop.org> wrote:
On Wed, 20 Nov 2019, Matt Vernhout via mailop wrote:
If a sender asked you to reject that mail with their policy do them
a favour and send a bounce that says something like ‘your DMARC said
to bounce failed messages, if this is wrong fix your authentication
and try again’
????
One of the features of DMARC is that it provides URLs for
reporting failed messages.
Bounces like this tend to get people attention.
--
Andrew C. Aitchison Kendal, UK
and...@aitchison.me.uk
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
_______________________________________________
mailop mailing
listmailop@mailop.orghttps://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
