Re: [mailop] DMARC with broken DKIM (was: Re: DMARC p=quarantine pct=0)

2018-04-09 Thread John Levine
In article you write: >-=-=-=-=-=- > >We've also seen various banks and other large companies who seem to >specifically only use SPF with DMARC, as a way of disallowing forwarding, I >guess. More likely their mail comes from a lot of places with hostile mail admins, and while the overall admins

Re: [mailop] DMARC with broken DKIM (was: Re: DMARC p=quarantine pct=0)

2018-04-09 Thread John Levine
In article you write: >Sometimes I'm thinking DMARC should have enforced DKIM, and not allowed >to have only a match in {SPF, DKIM}, because it leads to issues like >broken-DKIM working-SPF domains not noticing things are wrong even >though they *are*… That was ADSP. It was even worse than DMARC

Re: [mailop] DMARC with broken DKIM (was: Re: DMARC p=quarantine pct=0)

2018-04-09 Thread Brandon Long via mailop
We've also seen various banks and other large companies who seem to specifically only use SPF with DMARC, as a way of disallowing forwarding, I guess. With ARC, you can actually "pass" the SPF pass through the forwarder. Not that there's anywhere near wide enough acceptance of ARC to make that yo

[mailop] DMARC with broken DKIM (was: Re: DMARC p=quarantine pct=0)

2018-04-09 Thread Leo Gaspard via mailop
On 04/09/2018 08:45 PM, Jesse Thompson wrote:> Kinda, yes.  Anyone running a non-compliant list server should look to > how other list servers are making themselves compliant.  Could be... > 1) rewrite headers > 2) not break DKIM > 3) ARC? > I don't want to be overly prescriptive (no one in academi