On 10/17/2024 10:00 AM, Alessandro Vesely via mailop wrote:
Missing a backup authentication method would make DMARC even less
reliable.
On 17.10.24 17:18, Dave Crocker via mailop wrote:
A backup method that adds complexity and breaks under significant,
common scenarios does not sound like a great backup method.
I don't think that those scenarios are that common as you imply.
According to my experience, SPF matches quite often and problems are quite
rare.
I really don't see the point of keeping SPF out of DMARC.
It's not important how often it's broken, but how often it's correct.
Hence my continuing query about practice, rather than theory. Where
are the numbers that show this utility to be actually significant?
a very very simple query from some servers:
# zgrep -Fc -e DKIM_VALID_AU mail.log.1
3522
# grep -F SPF_PASS mail.log.1|grep -vc DKIM_VALID_AU
631
# zgrep -Fc -e DKIM_VALID_AU mail.log.1
9975
# grep -F SPF_PASS mail.log.1|grep -vc DKIM_VALID_AU
480
I'd call that worth using.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Saving Private Ryan...
Private Ryan exists. Overwrite? (Y/N)
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
