Re: DMARC?

On Tue, Aug 7, 2012 at 12:50 PM, Don Lee
<[email protected]> wrote:
> Anyone know about this:
>
> http://www.dmarc.org/
>
> I've spent about 10 minutes looking into it, and it looks like a worthwhile
> effort.  Other opinions?
>
> -dgl-
>

I'm one of the participants in dmarc.org (I beleive there are some
others who are lurking here as well. The effort basically came out of
the experience that a handful of senders and large mailbox providers
has doing something similar through private channels. The policy
assertion piece may not be for all senders but the reporting part
allows visiblity into auth failures where there didn't use to be any
visibility. For validators/receivers it is useful but not as usefulas
when there is greater adoption by senders. By combining the use of SPF
and DKIM you reduce false positives.