Is "-all" not indeed a policy in SPF, directed by the domain owner? I
would argue that it is. Especially given that there are options there,
each one defining how the domain owner wishes SPF failure to be treated.
I would find it odd to say that should ignore domain owners when they
say "-all" since that's a direct and clear request by them.
On 2023-08-19 06:31, Gellner, Oliver via mailop wrote:
On 19.08.2023 at 12:30 Benny Pedersen via mailop wrote:
prove it, it just loose dmarc aligment, if it was hardfails, lets not
ignore domain owners, ever
spf softfails can still pass dkim, hopefully you know this
You don't have to ignore domain owners as they do not put any kind of
policy into SPF records. SPF does not allow one to to this.
What domain owners can do is set up a policy in the DMARC record. Of
course on the receiver side you can make up any number of additional or
even contradictory policies like the one you described, as in „your
server, your rules". But I believe the guidance from M3AAWG which
actually takes existing policies from the sender side into account is
more friendly and provides less false positives. In a nutshell this
means: Do not reject emails based solely on SPF failures as soon as the
sending domain has a valid DMARC record.
--
BR Oliver
________________________________
dmTECH GmbH
Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232 Karlsruhe
Telefon 0721 5592-2500 Telefax 0721 5592-2777
dmt...@dm.de<mailto:dmt...@dm.de> * www.dmTECH.de
[1]<http://www.dmtech.de>
GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
Geschäftsführer: Christoph Werner, Martin Dallmeier, Roman Melcher
________________________________
Datenschutzrechtliche Informationen
Wenn Sie mit uns in Kontakt treten, beispielsweise wenn Sie an unser
ServiceCenter Fragen haben, bei uns einkaufen oder unser dialogicum in
Karlsruhe besuchen, mit uns in einer geschäftlichen Verbindung stehen
oder sich bei uns bewerben, verarbeiten wir personenbezogene Daten.
Informationen unter anderem zu den konkreten Datenverarbeitungen,
Löschfristen, Ihren Rechten sowie die Kontaktdaten unserer
Datenschutzbeauftragten finden Sie
hier<https://www.dm.de/datenschutzerklaerung-kommunikation-mit-externen-493832>.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
Links:
------
[1] http://www.dmTECH.de
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
