In article <20200604133652.13ea3...@chewbacca.woody.ch> you write: >So I guess using only SPF and DMARC with a reject policy will not work >if the envelope sender and from domain do not align.
If you can't reliably sign with a DKIM signature that matches the From: domain, and you care if your mail gets delivered, you will be very sad if you publish any DMARC policy other than p=none. DMARC is not a magic bullet for all mail. It's an anti-phishing tool designed for senders with specific mail profiles, and a big part of the profile is being able to authenticate all of your mail in the limited ways that DMARC handles. _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
