Patrick Ben Koetter via Postfix-users skrev den 2025-01-14 13:46:
* natan via Postfix-users <na...@epf.pl>:
Hi
What is currently happening with the OpenArc project? On GitHub, I see the last modifications were made 7 years ago. Has the project completely failed? I'm asking because I see that Gmail/G-Suite are using it, and, after all,
they are trendsetters. The OpenARC project seems quite useful and is
relatively easy to implement with Postfix and milters or probbaly others 3party software. I'm asking because I have OpenARC running on one instance
and I'm wondering what to do next.

Use it while you can. It will very likely go away within the next 3 years and
it will be replaced by something even more complicated… ;-)

But seriously: It's not worth the hassle unless you run a mailing list or so.
But even then ARC will very likely be replaced.

lol :)

strip down rspamd to service ARC only, as a policy bank, job done

in postfix please do:

port 25: do ARC-verify, clamav, and possible more before breaking dkim

port 465, 587: do dkim sign only if originating email, this should not include maillists

after all this its safe to break dkim in maillists, since originating state is trackleble from ARC

i belive no one do this since it needs to have ARC-Signer AR trusted

i do use AuthRes in spamassassin with good results

maybe do an ARC-* in perl, should not be very hard to make that milter, all needed is just the perl milter

sadly sys4.de breaks dkim long before rspamd have done arc-signed, arc-sealed with the state from port 25 incomming non originating, so it will never work
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to