On Mar 28, 2013, at 3:51 PM, Benjamin BILLON <[email protected]> wrote:

> Hard to automatize, yes.
> The Sender: header was helping to automatically sign with DKIM, but no such 
> luck with DMARC, it has to be From: and MAI FROM, and nothing else.
> That implies either a DNS-aware-and-capable customer (for either setup or 
> delegation) or to buy a dedicated domain for the customer (which often must 
> be validated by legal dept.): not something you have in a blink.

A dedicated domain purchased for the customer makes you, in a technical sense, 
no different to any other phishing mail.

Cheers,
  Steve


_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to