On Monday, April 04, 2016 09:34:56 PM RW wrote: > On Mon, 04 Apr 2016 13:18:54 -0700 > > Alan Hodgson wrote: > > On Monday, April 04, 2016 08:59:51 PM RW wrote: > > > I'm assuming that you are using these rules: > > > > > > https://blog.laussat.de/2014/11/06/using-dmarc-in-spamassassin-native/ > > ... > > > That's invalid, though. DMARC allows a subdomain to sign the mail > > with a relaxed alignment policy. The original message should have > > passed a DMARC test. > > It's just a collection of rules that make use of the dmarc dns > lookup, it doesn't pretend to be a dmarc implementation. See the bottom > of the page linked.
I see that, and it's a good disclaimer. I would disagree that those tests will work as intended in most cases, though. Many ESPs sign with subdomain keys. And clearly AOL is, too. Relaxed alignment is the DMARC default.
