Dexter via mailop skrev den 2026-09-20 14:34:

Interested in how people here handle it in practice.

Authentication-Results mx.junc.eu (amavis); dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=ilands.app header.b="ztDHxKwH"; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=amazonses.com header.b="XVpJiiLx"

what should dkim, dmarc, spf do here ?

even if policy is none at dmarc, dkim can still reject, even worse spf might fail maserable :=)

many says dkim2 is the solution on breaking dkim

but what will it helps on untrusted dkim signers ?

PS: if maillists start reject dmarc policy reject, then there is only host that reject dkim fails, but it will never happend, world is always stupid

untested: what if dkim signers using test mode, to support not reject on test signers, then dmarc could accept policy ?

what are the rfc says ?


_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to