On Wed, Feb 8, 2017 at 9:28 AM, Jacob Rideout <[email protected]> wrote:

>
> What is expected workflow in this case?
>
> Say I'm alumni-forwarder.edu, and I receive a message with an ARC set
> (and for the sake of this example, these are forgeries). After checking the
> signitures, I consider the ARC set to be invalid. Section 6.4.2 suggests I
> inform the sender of a message integrity failure. However, presume (given
> no other abuse or spam signals) I want to forward all the mail receive on
> and ARC failure alone is an insufficent reason to stop my forwarding.
>
> How do I proceed? Stip the existing ARC set and start over with i=1 ?  Set
> cv=fail?
>
> A downstream receiver still might want to trust the 
> [ARC-]Authentication-Results
> appended by alumni-forwarder.edu, but I think currently would be advised
> against it in the case of cv=fail.
>
> - Jacob
>

This question is exactly what we are discussing. There is no one else to
define what "should" be done. What do *you* think should be done?

--Kurt
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to