Hi Konstantin, Konstantin Ryabitsev wrote: > On Thu, May 20, 2021 at 09:04:43PM +0200, Yann E. MORIN wrote:
>> Ah, but this is required when the sender is from a domain with DMARC >> with a Reject or Quarantine policy, and the recipient server checks that >> setting. > > It's only required if there is no DKIM signature on the original message (see > my musings on this subject here: > https://people.kernel.org/monsieuricon/subspace-mailing-list-server#appeasing-dmarc > ) > > If there is no DKIM signature on the original mail, then yes, the DMARC > verification server is supposed to perform an "alignment check" to make sure > that the envelope-from domain matches the in-header From: domain. [...] > A much better solution is to have everyone properly DKIM-sign > their outgoing mail. :) I just wanted to thank you for this. I remember when DMARC+SPF broke the mailing list ecosystem, and I had no idea that increased adoption of DKIM is going to allow un-breaking it. That little glimmer of hope was a great addition to my day. Jonathan _______________________________________________ Patchwork mailing list [email protected] https://lists.ozlabs.org/listinfo/patchwork
