>ReSenders haven't introduced any interoperability issues.  DMARC has.  How 
>about:

Indeed.  I agree with the advice to refrain from blaming the victim.

>   o  MTAs sending email on behalf of multiple domains may require
>      Domain Owners to provide DKIM keys to use DKIM to avoid SPF
>      alignment issues.  Managing DKIM keys with a third party has
>      security risks which should be carefully managed.
>
>This can generally be done through CNAMES or subdomain delegation.  I've yet 
>to see anyone handle this situation by actually exchanging private keys across 
>an administrative boundary.

A manager at a well known ESP told me that one of the free mail
suspects gave them a DKIM signing key.  (I forget whether it was A or
Y.)

R's,
John

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to