spf,

> no maillists is broke by yahoo and others, its the maillists that have 
> never being dkim safe

That's not the only case.

Messages forwarded through Yahoo Groups have passed DKIM/DomainKeys for about 
as long as those standards have existed. Like many lists services, they modify 
the subject field and append footers to the bottom of the message. Passing DKIM 
is achieved by removing any original signature and supplying a new one with 
d=yahoogroups.com. 

The problem under DMARC, but not under DKIM, is that the signature isn't 
"aligned" with the From header element, as required by DMARC. So yes, in this 
case AOL has broken Yahoo Groups in exactly the way that has been long 
predicted (at least as far back as early 2012 in this list's archives). And a 
lot of Yahoo Groups members with AOL, Comcast, and other services that 
currently enforce the reject strictly are upset that they're no longer 
receiving all the messages in the list traffic.

The irony, if there is one, is that Yahoo Groups wasn't prepared for DMARC even 
though Yahoo Mail led the way down this particular garden path. That has a 
certain, let's be polite and call it "cognitive dissonance", with Yahoo's 
public statements in support of their switch to p=reject.

-- Shal

_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to