I'm not an expert on ARC, so take what I say with a grain of salt and feel free
to correct me.
As far as I know, ARC only solves this issue if the recipient trusts your ARC
signature. So it really depends on the environment if it actually will be a
solution. In most scenarios, the mailbox owner can't trust ARC signatures
themselves. I would prepare for disappointing results unless you're the one
managing both systems.
> a) I use always SRS and ARC to sign/seal the message when I forward
> b) I only use ARC and no SRS when the original senders domain has a
> dmarc-policy
There will be recipients that check SPF before checking anything ARC/DMARC
related, or they may simply not support checking ARC or DMARC and just enforce
SPF, so I'd always keep using SRS. I see no reason not to at least, beyond
having to handle messages sent to the return-path.
The current reality is that if a sender wants their email to pass DMARC after
forwarding, they should implement DKIM signing. If a sender has a reject policy,
but then doesn't use DKIM signing, breaking of forwarding for their messages is
entirely expected.
Groetjes,
Louis
On Wednesday, February 12, 2025 8:33 AM, Niels Kobschätzki via mailop
<[email protected]> wrote:
> Hello,
>
> I have encountered the first time apparently the problem that I have a user
> who forwards mails to another mail-server and a forwarded mail got rejected
> because of the dmarc-policy of the original senders domain.
> I am using SRS and my understanding is that ARC should solve the problem since
> DMARC breaks SRS and the solution for that is ARC.
>
> Now my question: if I implement ARC, what do I do with a mail that is
> forwarded?
> a) I use always SRS and ARC to sign/seal the message when I forward
> b) I only use ARC and no SRS when the original senders domain has a
> dmarc-policy (so I need to check that before forwarding)
>
> Also: does anyone have an idea when the ARC-RFC is finalized? From what I’ve
> seen it is marked as experimental for like 6 years now?
>
> Thanks,
>
> Niels
> _______________________________________________
> mailop mailing list
> [email protected] [[email protected]]
> https://list.mailop.org/listinfo/mailop
> [https://list.mailop.org/listinfo/mailop]
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
