Just a quickie here on DMARC. I set one domain to "quarantine" and set up the rua to email me a report. Thus far, only MS Hotmail sends me anything, even though I have emailed yahoo accounts.
The MS Hotmail report is in XML, which I can read in vim or whatever. I'm not sure what they intended me to use. Doing a survey of email clients with SPF and DKIM verification, I only found Thunderbird does this, and with a plugin. Thunderbird is in caretaker status, so I don't use it. Thus an identification system (SPF and DKIM ) had been created that mail system administrators are loathe to strictly enforce for received email, and with no consequences, is only half heartedly complied with on the sending side. (Congrats to the interwebs for at least providing many DKIM/SPf verification websites.) And if we agree (OK, some agree) that strict rejection of received email based on SPF and DKIM is not a good idea, you would think at least the email clients would make detection of these identification methods more automatic. Hats off to programmers for providing/maintaining tools that the masses don't appreciate.
