On Thu 21/Sep/2023 22:27:30 +0200 Brotman, Alex wrote:

Including that data in a DMARC report may not be very useful if it's going to the domain holder instead of the DKIM signer. For example, SES signs all of their messages, but unless that 5322 owner shares the data, they wouldn't see any information relating to those signatures.


Yeah, they put two signatures, the first one having d=amazonses.com. Their second signature is aligned with the From: domain, though. DMARC reports include results of third party signatures, and SES may ask its account holders to share those reports.

A similar problem is going to occur when DMARC reports will include an ARC extension. ARC sealers will most probably _not_ be related with the sender —if anything, they'd rather communicate with final receivers.

At any rate, it may be easier to tweak the behavior of an alive kid rather than trying to revive a dead one.


Best
Ale
--




_______________________________________________
Ietf-dkim mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-dkim

Reply via email to