On Tuesday, April 08, 2014 16:45:52 Matt Simerson wrote: > On Apr 8, 2014, at 4:35 PM, Scott Kitterman <[email protected]> wrote: > > On April 8, 2014 7:28:53 PM EDT, Matt Simerson <[email protected]> wrote: > >> On Apr 8, 2014, at 4:11 PM, Scott Kitterman <[email protected]> > >> > >> wrote: > >>> Okay. I'll bite. > >>> > >>> For what I think of as a normal mailing list that uses its own mail > >>> from and does DKIM signature breaking things like modifying the subject > >>> line or adding a footer to the message with unsubscribe or list archive > >>> information, what's the canonical solution to interoperating in a DMARC > >>> with p=reject enabled world and where is it documented? > >> > >> http://dmarc.org/faq.html#s_3 > >> > >> And I quote: > >> > >> I operate a mailing list and I want to interoperate with DMARC, what > >> should I do? > >> > >> DMARC introduces the concept of aligned identifiers. It means the > >> > >> domain in the from header must match the d= in the DKIM signature and > >> the domain in the mail from envelope. > >> > >> You have a few solutions: > >> • operate as a strict forwarder, where the message is not changed and > >> > >> the validity of the DKIM signature is preserved > >> > >> • introduce an "Original Authentication Results" header to indicate > >> > >> you have performed the authentication and you are validating it > >> > >> • take ownership of the email, by removing the DKIM signature and > >> > >> putting your own as well as changing the from header in the email to > >> contain an email address within your mailing list domain. > > > > In other words: don't be a mailing list. > > That's one perspective. Another is: > > cd path/to/ezmlm/list; rm prefix text/trailer addtrailer > > and go on with being a mailing list.
Right. So then we train people that the "right" way to figure out to unsubscribe or locate the list archive is to look in the message headers for the correct header field (unsigned by the domain in From, BTW) and then copy/paste whatever's there into their browser. Works for me just fine. Actual non-technical users, not so much. Scott K _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
