Dave Crocker writes:
 > On 3/19/2015 12:52 PM, Murray S. Kucherawy wrote:
 > > And since the From field is the only one users really see every time,
 > > I'm not sure that declaring and supporting yet another
 > > no-seriously-this-is-the-author field would be of benefit. 
 > 
 > 
 > I'd like to try to get us to phrase this differently.
 > 
 > In particular, it does not matter what user's 'see'.  The information is
 > processed by a filtering agent, independent of the user.
 > 
 >      So what matters is that the From: field domain is the
 >      only field certain to be provided by the author.
 > 
 > Everything about DMARC derives from the certainty of that presence.

Except for the very existence of DMARC, which was primarily motivated
by phishing and "recommended-by-friend spam", which depend on what the
recipient sees, and the recipient's association of trustworthiness
with the message's apparent author.

So no, the filtering agents don't really matter to DMARC as far as I
can see.  What matters to DMARC is when inauthentic From addresses get
past the filtering agents.  At that point DMARC intervenes and
(optionally at the domain owner's request) interdicts inauthentic
addresses in From:.

Steve


_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to