Re: EAI and ADSP/DMARC

>> A correct implementation of DMARC will reject emails at the edge as per
>> sender policies.
>
>You mentioned about ten big implementers. Are all correct in this 
>regard? (Just curious.)

I think they all do the filtering in the SMTP session.  These days you
really want to reject the mail you don't want rather than sending
bounces, due to the blowback problem, so it's very common to do all of
the spam filtering at SMTP time.

The reasons to queue incoming mail and think about it later are a lot
less compelling now than they were in the 1980s or 1990s.

R's,
John

PS: This still doesn't mean that there's any reason to change your
mail system to do what DMARC wants unless you also want to.  It's
useful for protection against a narrow category of forged mail that
fakes famous domains, not very useful otherwise.  In particular, other
than the statistics gathering, it's useless for domains that have live
users who do typical live user stuff like forwarding their mail to
gmail and replying from there or using send-to-a-friend on a newspaper
web site.
_______________________________________________
ietf-822 mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-822