On Mon, 13 Jul 2026, Emanuel Schorsch wrote:
I wasn’t around at the time so please correct me if I’m off base here but
to me it seems like blocking mailing list mail for p=reject domains without
fromHeader rewriting is an expected consequence of the spec. ...

Indeed it is. When DMARC was new, I don't think anyone expected retail consumer ISPs to publish anything other than p=none. But then AOL and Yahoo, which were then separate companies, each had terrible security and crooks broke in and stole their users' address books. This let spammers send spam with a friend of the recipient on the From: line. This blew up their support lines ("why is my grandmother trying to sell me fake Viagra?") They each realized that p=none would make most of the spam bounce, and according to someone was in the room, Yahoo's CEO said they knew it would wreck mailing lists and they didn't care.

Some people will tell you that the goal was always to make everyone do p=none. It wasn't, but here we are.

R's,
John

_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to