J.,

To be completely accurate, it's not a matter of a message "failing" SPF,
but rather, the lack of an authenticated identitifier resulting from the
SPF check. From the DMARC draft spec version 2:

4.1.  Summary

   DMARC's filtering component is based on whether or not SPF or DKIM
   can provide an authenticated -- and relevant -- identifier for any
   given message.  Messages that purport to be from a Domain Owner's
   domain and arrive from servers that are not authorized by SPF and do
   not contain an appropriate DKIM signature can be affected by DMARC
   policies.


DMARC requires at least one authenticated identifier that is aligned with
the From: header. If you don't get one from SPF, then you must rely on a
DKIM authenticated identifier that is aligned with the From: header. If you
get neither, then the message is subject to the From: header domain's DMARC
policy.

John Wilson

On Tue, Mar 26, 2013 at 3:49 PM, J. Gomez <[email protected]> wrote:

> John Wilson wrote:
>
> > J.,
> >
> > 1. Yes, you are correct.
> > 2. Yes, you are correct...the message will be rejected.
> > 3. Yes...if your envelope-from domain has no SPF record, that is
> considered an SPF-fail for DMARC purposes.
> > 4. Yes, you are correct: all unsigned messages lacking an SPF record for
> the envelope-from domain will be rejected based on your DMARC record of
> "v=DMARC1;p=reject" UNLESS the receiving ISP decides to override your
> policy.
> >
>
> Ok, so where in the DMARC draft specification is it stated that
> SPF-absence equals a result of DMARC-fail for the SPF-mechanism?
>
> Also, I find it troubling that DMARC leverages SPF and at the same time
> changes the RFC-sanctioned SPF semantics (i.e., the old SPF-neutral now
> becomes SPF-fail for DMARC).
>
> -J. Gomez.
>
> _______________________________________________
> dmarc-discuss mailing list
> [email protected]
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to