Re: Catch subtly-different Reply-To domain

[Benny Pedersen]

On 2021-02-21 17:00, RW wrote:

On Sun, 21 Feb 2021 14:04:20 +0000
Dominic Raferd wrote:

On 21/02/2021 13:56, RW wrote:

>>> From: "Karen Howard" <ka...@interfacefm.com>
>>> Reply-To: "Karen Howard" <ka...@intrefacefm.com>

Yes this mail passed DMARC

How did it pass DMARC when it has the domain being spoofed in the from
header?

both domains can have dmarc, but only from header is dmarc tested

and dkim can sign reply-to