On Jan 24, 2014, at 11:47 AM, Matt Simerson <[email protected]> wrote: > > On Jan 24, 2014, at 11:35 AM, Steve Atkins <[email protected]> wrote: > >> On Jan 24, 2014, at 11:07 AM, Franck Martin <[email protected]> wrote: >>> >>> All the apache.org mailing lists are fine as for one example. >>> >>> http://www.apache.org/foundation/mailinglists.html >> >> What is it about the apache lists that makes them DMARC aware? They don’t >> seem to rewrite the 5322 From: address, and they do appear to rewrite the >> Subject line (presumably breaking DKIM signatures). I’d expect that to >> provoke DMARC rejections, if any typical user were to interact with the list >> from a domain that used DMARC. >> >> (Random example mail: >> http://mail-archives.apache.org/mod_mbox/httpd-users/201401.mbox/raw/%[email protected]%3e >> ) > > Most Apache lists aren't DMARC aware, they're DMARC agnostic. Most of the > Apache lists use Ezmlm, same as I do. I read somewhere that Apache doesn't > append body trailers, which would leave only the Subject prefixing lists with > any issue DMARC related issues, and then only from domains that sign the > Subject header.
The example mail I linked to - from the apache webserver list - is ezmlm, but appears to prefix the subject line and add a trailer to the body. > For those sender domains with mailing list users, they could just drop > Subject from the list of fields they sign. I'm not sure if anyone does that. > On my lists, I just dropped the subject prefixes. Subject prefixes are a fairly significant mailing list feature - especially for those 99% of users who don’t have hand-crafted filters routing mailing list mail to it’s own mailboxes - I’d hope that mailing list operators wouldn’t drop them for something as minor as working around misuse of DMARC. Cheers, Steve _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
