It appears that Murray S. Kucherawy <[email protected]> said: >-=-=-=-=-=- > >On Sun, Feb 4, 2024 at 5:25 AM Alessandro Vesely <[email protected]> wrote: > >> > What do we think has changed since then that warrants reconsidering that >> > position? Have we started to see multi-value From attacks? >> >> A DMARC filter has to do something when it sees a multi-value From:. > > >Why? It hasn't so far (i.e., ~10 years). What's the evidence that we have >something to fix here? That is, why is Section 6.6.1 of RFC 7489 suddenly >inadequate?
As I recall, large mail systems have told us that the number of messages with multiple From: addreses is evtremely small, and nearly all of them are broken or malicious. I'm with you, multiple From: addresses have never been a problem and never will be a problem. If this is all we have left to argue about we must be done. R's, John _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
