Matus UHLAR - fantomas: > > > and spf is unapplicable since the envelope from is null. > > > > Isn't that the case with all bounce messages? > > usually yes, it should be. But we of course can't guarantee that. > > This also means that SPF can't be used, thus either those messages have DKIM > signatures, or they CAN NOT pass DMARC.
In SPF, when the reverse-path is null, the HELO name is instead verified. So a null reverse-path can work fine with relaxed alignment.