Re: DMARC
Dotzero <[email protected]> Mon, 18 Mar 2013 20:24:44 -0400
| Newsgroups | gmane.ietf.asrg |
|---|---|
| Message-ID | <CAJ4XoYdkij6vxTj=py4+-UsYTrah0k4ECoNOwtCqZdxOZR-33Q@mail.gmail.com> |
Neil trolling? On Mon, Mar 18, 2013 at 6:53 PM, Neil Schwartzman <[email protected]> wrote: > Some people think DMARC will save email (from what?) others think it breaks email because of mailing lists such as this one (which are a rare anachronism say some). > > Discuss. > > {waves at new sub Murray} DMARC is a tool that allows domain owners or agents to do a couple of things - if you want saving, seek religious counsel. 1) DMARC enables authentication failure reporting from mailbox providers that choose to participate. This provides insight into mail claiming to be from them for senders that never had this sort of visibility before. This insight includes mail that was actually sent by the domain but failed to validate (aligned SPF or DKIM) or mail that was not sent by the domain and failed to validate (aligned SPF or DKIM). 2) DMARC provides a domain owner or agent the opportunity to express (negative) policy regarding mail that fails to validate for either aligned SPF or DKIM. This ability to express policy indicating a receiver should either quarantine or reject (depending on the policy published) provides protection against direct domain abuse. Mike