On Wed, 2018-12-05 at 00:17 +0000, David Jones wrote: > I think he meant that DKIM related to DMARC means the DKIM signature has > to align/match the From: header domain to pass which is DKIM_VALID_AU in SA. > > In the case of SPF, DMARC will pass if the envelope-from domain check > hits SPF_PASS in SA. >
Not quite; DMARC also requires the envelope sender domain to be aligned with the From: header domain to pass on an SPF_PASS.
