On Fri 25/Oct/2024 00:13:43 +0200 John Levine wrote:
It appears that Murray S. Kucherawy <[email protected]> said:
You raised ARC, which is the obvious answer, but I also concur with your
point that we've fallen short of actually proving anything by collecting
and publishing efficacy results, despite me asking more than once.
You're right, we don't. Large mail systems tell me that they find ARC somewhat
useful but I don't expect it to get much more popular. Every recipient system
needs to have an idea of whose ARC signatures they trust, and a fairly
complicated analysis of the headers and that scales poorly.
Forwarder to receiver: Hey, I'm going to put X on my mailing list/ dot-forward.
Receiver to user X: Did you ask forwarder to put your address on their mailing
list/ dot-forward?
User X to receiver: Yes, I did. I want that mail.
Receiver to forwarder: OK, I trust your ARC signature for said flow directed to
X.
That way a receiver has to manage a list of forwarding recipes for each user.
That is similar to the list of correspondent some spam filter used to maintain
in order to whitelist known authors (before Yahoo leak), except that forwarding
is authenticated.
Best
Ale
--
_______________________________________________
dmarc mailing list -- [email protected]
To unsubscribe send an email to [email protected]
