On 18/05/2024 01:53, Alex Liu wrote:
I dont know this is that new with regard to DMARC. missing citation: https://www.usenix.org/system/files/sec20-chen-jianjun.pdf
Thanks for the reference, I'll give it a read when I get the chance. Email is quite old by now, so the amount of resources to go through is rather immense.
Every a few months we see a paper / blogpost that passes SPF / DKIM / DMARC. So maybe requiring both SPF and DKIM for BIMI would be a good idea.
Both together might make sending a bit too error-prone. Hardening DKIM seems more doable. I hope that IETF's mailmaint gets to discuss topics like these and maybe we'll see some standardized approaches.
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
