We've been looking at implementing ARC in our MTA (Halon) and DKIM library and wanted to share the following findings

A. If the DKIM selectors DNS record includes the flag t=s, the DKIM standard says we should match the i= tag with the d= tag. This is of course not possible for AMS since i= is reused for instance. This was an exception we had make in our shared validator for AMS and DKIM. I think it should be mentioned somewhere if it's not.

B. There is plausibly a typo in draft-ietf-dmarc-arc-protocol-14#appendix-B.3.3 example where the "Authentication-Results: i=3; gmail.com; ..." header should probably be an AAR header since it begins with i=3; and is missing otherwise.

Regards

Erik

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to