On Apr 8, 2014, at 4:35 PM, Scott Kitterman <[email protected]> wrote:
> On April 8, 2014 7:28:53 PM EDT, Matt Simerson <[email protected]> wrote: >> >> On Apr 8, 2014, at 4:11 PM, Scott Kitterman <[email protected]> >> wrote: >> >>> Okay. I'll bite. >>> >>> For what I think of as a normal mailing list that uses its own mail >>> from and does DKIM signature breaking things like modifying the subject >>> line or adding a footer to the message with unsubscribe or list archive >>> information, what's the canonical solution to interoperating in a DMARC >>> with p=reject enabled world and where is it documented? >> >> http://dmarc.org/faq.html#s_3 >> >> And I quote: >> >> I operate a mailing list and I want to interoperate with DMARC, what >> should I do? >> DMARC introduces the concept of aligned identifiers. It means the >> domain in the from header must match the d= in the DKIM signature and >> the domain in the mail from envelope. >> You have a few solutions: >> >> • operate as a strict forwarder, where the message is not changed and >> the validity of the DKIM signature is preserved >> • introduce an "Original Authentication Results" header to indicate >> you have performed the authentication and you are validating it >> • take ownership of the email, by removing the DKIM signature and >> putting your own as well as changing the from header in the email to >> contain an email address within your mailing list domain. > > In other words: don't be a mailing list. That's one perspective. Another is: cd path/to/ezmlm/list; rm prefix text/trailer addtrailer and go on with being a mailing list. Matt _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
