John R. Levine writes:
> On Fri, 6 Feb 2026, Tero Kivinen wrote:
> > ARC is very useful in that. Unfortunately we still have very limited
> > support for the email recipient to configure per user trusted ARC
> > forwarders, ...
> 
> It's been a decade, it's not going to happen.

And it will be few more decades until we have DKIM2, so there is those
decades time to get ARC implemented also in the mail receivers.

> I suspect that if I suggested to large mail providers that they provide 
> per-user inbound forwarding config, the response would be polite 
> amusement.

All of the processing needed for ARC can be done in your mail client
if needed. There is nothing there that would require mail provider to
do anything, except to not throw away emails all the time. Yes, lots
of mail providers who are not in the mail business but are selling
something else and just providing mail at the side do not care whether
your emails are delivered to you or not, but if you have actual mail
provider who cares about their customers (i.e., where their users are
customers, not products), most likely already have methods of allowing
you do filtering based on your rules, not by their mandated rules.

> (Try explaining it to my 89 year old mother-in-law who is quite
> sharp but grew up listening to the radio.) Also keep in mind that
> the large mail systems all know where the forwarders and mailing
> lists are and even so they don't find ARC useful.

No, they do not know, and they should not need to care. What the mail
application should do is that when you go to your spam folder and tell
that these emails (which have been forwarded or which are from mailing
list) are not spam, the mail application should notice there is ARC
header there, and ask users "It seems there is domain iki.fi that
forwards emails to you, do you know that domain, and do you want to
trust it in future?".

If user says yes, then that domain should be added to the trusted
forwarders list for you, and the authentication results from those
authenticated ARC headers should also be used when deciding whether
email sender is authenticated or not.
-- 
[email protected]

_______________________________________________
dmarc mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to