J., To be completely accurate, it's not a matter of a message "failing" SPF, but rather, the lack of an authenticated identitifier resulting from the SPF check. From the DMARC draft spec version 2:
4.1. Summary DMARC's filtering component is based on whether or not SPF or DKIM can provide an authenticated -- and relevant -- identifier for any given message. Messages that purport to be from a Domain Owner's domain and arrive from servers that are not authorized by SPF and do not contain an appropriate DKIM signature can be affected by DMARC policies. DMARC requires at least one authenticated identifier that is aligned with the From: header. If you don't get one from SPF, then you must rely on a DKIM authenticated identifier that is aligned with the From: header. If you get neither, then the message is subject to the From: header domain's DMARC policy. John Wilson On Tue, Mar 26, 2013 at 3:49 PM, J. Gomez <[email protected]> wrote: > John Wilson wrote: > > > J., > > > > 1. Yes, you are correct. > > 2. Yes, you are correct...the message will be rejected. > > 3. Yes...if your envelope-from domain has no SPF record, that is > considered an SPF-fail for DMARC purposes. > > 4. Yes, you are correct: all unsigned messages lacking an SPF record for > the envelope-from domain will be rejected based on your DMARC record of > "v=DMARC1;p=reject" UNLESS the receiving ISP decides to override your > policy. > > > > Ok, so where in the DMARC draft specification is it stated that > SPF-absence equals a result of DMARC-fail for the SPF-mechanism? > > Also, I find it troubling that DMARC leverages SPF and at the same time > changes the RFC-sanctioned SPF semantics (i.e., the old SPF-neutral now > becomes SPF-fail for DMARC). > > -J. Gomez. > > _______________________________________________ > dmarc-discuss mailing list > [email protected] > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well > terms (http://www.dmarc.org/note_well.html) >
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
