On 5 Feb 2024, at 22:22, Murray S. Kucherawy wrote: > No, it's perfectly fine to declare that DMARC only applies to certain > classes of messages.
This actually concerns me a bit. If having multiple From: addresses causes a message to be out of scope for DMARC and therefore bypass a p=reject policy, that sounds like a reason that attackers might start sending messages with multiple From: addresses in order to accomplish that. -Jim _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
