On 3/21/2024 7:05 PM, Scott Kitterman wrote:
On March 21, 2024 11:39:35 PM UTC, "Murray S. Kucherawy"<[email protected]>
wrote:
On Fri, Mar 22, 2024 at 12:59 AM Scott Kitterman<[email protected]>
wrote:
For t=y, DKIM says:
y This domain is testing DKIM. Verifiers MUST NOT treat
messages
from Signers in testing mode differently from unsigned email,
even should the signature fail to verify. Verifiers MAY wish
to track testing mode results to assist the Signer.
So reporting dkim=pass for testing keys seems to be a violation.
DMARC being told "pass" by a DKIM engine for a testing key is a problem in
the DKIM engine.
I agree.
I don't feel particularly strongly about this, but I can see people thinking
there's some correlation between DKIM testing and DMARC testing. It's not
completely illogical, so it might be better to be explicit.
Scott K
Agreed as well. It's worth calling out, IMO.
- Mark Alley
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc
