Scott Kitterman <[email protected]> writes: > DMARC takes the SPF result and the Mail From as an input > (which in the case of a null Mail From is a synthetic Mail From > built using HELO, but that's just a coincidence). SPF isn't > just a result (pass, fail, etc), it also has a domain and a > related identity.
... in other words, aside from its presence in the null return path case, the HELO identity is *not* used by DMARC. Murray S. Kucherawy <[email protected]> writes: > I can say that OpenDMARC consumes the Authentication-Results field, or the > Received-SPF field if the former isn't there, but it prefers a result based > on MAIL FROM over one based on HELO if both are present. But it will use > both. ... in other words, a HELO identity *can* be used by DMARC. Either I'm misunderstanding both of you, or the implementations differ on this point. :-( Anne. -- Ms. Anne Bennett, Senior Sysadmin, ENCS, Concordia University, Montreal H3G 1M8 [email protected] +1 514 848-2424 x2285 _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
