On 2021-07-15 at 19:44:41 UTC-0400 (Fri, 16 Jul 2021 09:44:41 +1000)
raf <post...@raf.org>
is rumored to have said:
SPF by itself would have checked the envelope address
(owner-postfix-us...@postfix.org), but DMARC's
reinterpretation of SPF is not the same as actual SPF.
It checks the From: address (@raf.org) instead of the
envelope address (@postfix.org).
Not exactly.
SPF always checks the envelope sender. DMARC only considers SPF if the
envelope sender domain aligns with the From header address domain.
That's why the DMARC+SPF check failed (even though a
plain SPF check (which didn't happen) would have
passed).
No, postfix.org has no TXT record, so mail from a postfix.org address
can neither pass nor fail a SPF test.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
