>A mailing-list and receiver change option that has also been suggested to me >is to have mailing lists >include the original message as a MIME component -- you can then verify the >signature on the original >message and do some kind of comparison to the new one and decide how you feel >about it. Again, it's a >future-work solution.
Well, yeah, we call those MIME digests. They work now in most list managers, but the UI leaves a lot to be desired. Most list managers let you set the digest frequency so you could set it to something like five minutes to limit the delivery delay, and most of the digests would have only one or two messages. It occurs to me that Yahoo has a set of 30,000 mailing list like hosts that send you mail according to last month's blog post, and due the way DMARC works, you can look at a copy of every message that is rejected due to DMARC policy. Have you looked at the DMARC rejected stuff from those hosts, or a sample thereof, to see whether they're really a hole you need to protect your users from? R's, John _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
