https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8300
--- Comment #6 from Kent Oyer <k...@mxguardian.net> --- ARC is definitely not required for DMARC. However, if DMARC fails for some reason SpamAssassin is trying to infer information from the ARC signature, if present. On a side note, I'm not sure if we should even be doing this unless it's limited to certain trusted ARC signers. The more I look at this code, the more I think it needs a complete rewrite. -- You are receiving this mail because: You are the assignee for the bug.