We may be alone in this situation, but I suspect we're not. Due to an historical issue related to a hosted Google Apps implementation, email from our domain has "From:" in @livingsocial.com, but our MAIL FROM: is within @ hungrymachine.com. Mail sent from our users via the Gmail web UI generally passes DMARC, because it's DKIM-signed with a livingsocial.com identifier. Some of my C*O level users, however, are complaining about issues sending email via mobile devices, because they're sent via gateways that don't DKIM sign the mail with livingsocial.com identifiers. Those emails *do* emerge from IPs that are in our SPF record, but since MAIL FROM: is hungrymachine.com, and that's not aligned with the From: of livingsocial.com, DMARC is a failure.
Ultimately, I'm wondering if there's been discussion (or, if there should be discussion) regarding a mechanism that could be added to DMARC records to list additional domains that should be considered as 'aligned' with the From: domain being checked. -- David Romerstein | LivingSocial | Lead Delivery Engineer | www.livingsocial.com
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
