Dnia 2.11.2023 o godz. 09:42:01 Matus UHLAR - fantomas via Postfix-users pisze:
(once more: DKIM applies on header From:, SPF on envelope from:).
On 02.11.23 11:18, Jaroslaw Rafa via Postfix-users wrote:
And DMARC requires that both be identical (actually, from the same domain -
user part may be different), which makes things even harder.
If mail has valid DKIM signature matching the From: domain, it passes.
If the above does not pass, but SPF does pass AND domain in envelope from:
is the same as domain in header From:, it passes as well.
So, you only need to pass one of DKIM/SPF, but for SPF the envelope domain
must be the same as header domain.
On 02.11.23 10:49, Scott Kitterman via Postfix-users wrote:
This is only true for strict alignment, which is not the default. For
relaxed alignment (which is the default and what most domains use), the
Mail From domain (for SPF) and the DKIM signing domain (for DKIM) need to
be either the same domain as the body From domain or a subdomain. This
provides significant flexibility relative to the strict alignment
requirements, but this is little to do with the topic of the thread.
The alignment is about subdomains, not about SPF/DKIM.
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The early bird may get the worm, but the second mouse gets the cheese.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
