On May 28, 2017 11:27:35 AM EDT, John Levine <[email protected]> wrote:
>In article <[email protected]>,
>>Nothing other than potentially ARC requires multiple AR header fields
>for different authentication types to be combined.  These different
>>verification operations (e.g. SPF, DKIM, and DMARC) are generally
>performed be different processes that add their own AR field.
>
>Since DMARC needs the results of SPF and DKIM, how does that work?
>Does DMARC look at the A-R that the other two created or is there a
>side channel?  It occurs to me that a DMARC process has everything
>needed to make a header that combines all three.
snip

At least for OpenDMARC, if it's not doing it's own SPF check (which seems odd 
to me because it's done after DATA, but it works), it will look at multiple AR 
fields for both SPF and DKIM results.  

Scott K

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to