On Tue 20/Sep/2022 16:59:36 +0200 John R Levine via mailop wrote:
As I think I've mentioned many times before, the problem that ARC solves is
that legit lists leak spam because they often do no filtering other than
checking that the From: address is a subscriber. ...
Maybe the lists I hang out at have superior filtering than average, or maybe
it's because I ignore big gorillas' point of view, but I hardly see how that
helps. ...
People from Google have told me that's why they want ARC rather than just
whitelisting mail from lists.
If you think they're lying, not much I can do about that.
I never said I don't believe. I said I cannot understand how can they better
filtering by knowing the Authentication-Results: obtained by the MLM. Wouldn't
a MLM reject a post arriving with dmarc=fail and p=reject? (And I'd presume
they moderate failures with p=quarantine.)
What I read in assorted messages by Brandon is that they consider all signals
together, assigning weights extrapolated from a worldwide set of user behavior.
Of course I don't understand how that works. I wonder if they do. Slavko
said he tried that sort of thing using rspamd but it didn't work. So, how can
ARC be used by mere mortals?
You said you plan to start by believing ARC from everyone, and un-trust sites
that show up sending ARC'ed spam where the chain looks dodgy. Good luck! I do
blacklist domains that send blatant spam and find it very ineffective.
Best
Ale
--
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
