In article <[email protected]> you write: >> I continue to believe that authenticating the domain sending reports >> is of no value, since there is no way to tell what if any connection >> that domain has to the IPs in an aggregate report or the IPs or >> domains in a failure report. If I wanted to send fake gmail failure >> reports, I would register gmail-reports.com and send 100% perfectly >> aligned fake reports from that domain. >> >I send mail to gmail. I send no mail to gmail-reports. If anything you >are demonstrating even further that this is at best underspecified.
Hi, Mike. When Google sends aggregate reports, what address do you think they send them from? It should be easy enough to look at some of the reports you've gotten and check. R's, John _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
