Steve Atkins writes:

 > Mailing lists are only an issue if the domain owner of the
 > email addresses of the participants have published a
 > DMARC p=reject record, despite having actual users who
 > are legitimate source of email that fails authentication.

False.  Mailing lists only have an obvious problem if p=reject is
published, but DMARC doesn't say that you can't differentiate between
aligned mail and unaligned mail, only that you can't differentiate
between a failed signature verification and no signature at all.

Sites can and do assign negative spam points to verified signatures,
so there is a (smaller, but still real) problem for MLs even if nobody
publishes p=reject.


_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to