Mike via Postfix-users:
>
> Quoting Viktor Dukhovni via Postfix-users <postfix-users@postfix.org>:
>
> > On Sun, Oct 01, 2023 at 12:00:25AM +0300, mailmary--- via
> > Postfix-users wrote:
> >
> >> In my case, libspf2 is a dependent package of OpenDMARC
> >
> > Not surprising, since DMARC takes both DKIM and SPF into account.
> >
> > On my system, I sign outgoing mail with DKIM, but neither verify DKIM
> > signatures, nor attempt to enforce DMARC for inbound mail. So, FWIW,
> > there is no libspf2 in my Postfix stack, and the library is not
> > installed on my system.
> >
> > --
> > Viktor.
> > _______________________________________________
> > Postfix-users mailing list -- postfix-users@postfix.org
> > To unsubscribe send an email to postfix-users-le...@postfix.org
>
> This is probably obvious to most, but not being a current user of
> DKIM/DMARC, why don't you verify DKIM, or enforce DMARC for inbound
> mail?
>
> I'm going to make a guess that since it isn't implemented consistently
> across platforms, the problems it creates outweigh the benefits.
My system signs mail with DKIM and verifies but ignores the result.
Signatures are too fragile to be useful, and signatures from random
strangers are even less useful, whether or not they do verify.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
