On 25-03-09 10:42:04, Benny Pedersen via Postfix-users wrote:
> Petko Manolov via Postfix-users skrev den 2025-03-09 08:23:
> 
> > If a message falsely claim it originates from certain domain and then DKIM
> > fail, i very much don't want to receive, let alone read, this message.
> > Right?
> 
> this is still not a job for dkim to reject, if you want to reject its better
> done in dmarc

Yeah, this is where i'm doing it.

> where your dmarc only trust results from your dkim pass or fail results
> 
> its safe to reject on spf results, but not on dkim, since so many maillist
> breaks dkim sadly

Are people saving on a few CPU cycles or is it just lazy/careless admins?

> > Again, i'm not pointing a finger here, just want to know what i can expect
> > from those two milters and eventually understand why they behave the way
> > they do.
> 
> we all use beta software not fully tested in last 7 years :=)

I'd venture to say that significant portion of the software is in beta phase.
The rest is either in alpha or pre-alpha.

I expected that smtp (and everything around it) is a bit of a mess.  Didn't
known it is that bad. :)


                Petko
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to