Benny Pedersen via Postfix-users wrote in <a555bb43e4724fde5cbdbdbd74838...@junc.eu>: |Petko Manolov via Postfix-users skrev den 2025-03-09 08:23: |> If a message falsely claim it originates from certain domain and then |> DKIM fail, |> i very much don't want to receive, let alone read, this message. |> Right? | |this is still not a job for dkim to reject, if you want to reject its |better done in dmarc
This hopefully changes with the iteration of DKIM. I am still hoping for the better a bit, and that would mean that DMARC, ARC and that Google darn= thing get iterated out. SPF may not. Dependent on what happens, authentication-results headers may also vanish except for SPF, as their part could be a natural part of the DKIM iteration. |where your dmarc only trust results from your dkim pass or fail results | |its safe to reject on spf results, but not on dkim, since so many |maillist breaks dkim sadly This is to be addressed by the DKIM iteration. (But likely not completely automatically, since how could it.) |> Again, i'm not pointing a finger here, just want to know what i can |> expect from |> those two milters and eventually understand why they behave the way |> they do. | |we all use beta software not fully tested in last 7 years :=) --End of <a555bb43e4724fde5cbdbdbd74838...@junc.eu> --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt) _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org