* Otto J. Makela:

> Can you please expand a bit about SPF failures, since AFAIK on a
> properly configured mailing list the SMTP "mail from" (aka envelope
> sender) of messages sent through it would be to mailing list server,
> and naturally you'd include that in your domain's SPF?

By "your domain" you mean the mailing list's domain, right?

As far as envelope sender use is concerned, SourceHut does this, adds a
"Sender:" header on top, but leaves other message headers and the bodies
alone. Here is a recent example, headers trimmed for brevity and
addresses obfuscated:

  Return-Path: <[email protected]>
  Authentication-Results: naja.horus-it.com (amavis);
    dkim=pass (2048-bit key) header.d=lists.sr.ht header.b="TXR56UgM";
    dkim=pass (2048-bit key) header.d=nasilyan.com header.b="yVwwu/q+"
  Received: from mail-a.sr.ht (mail-a.sr.ht [46.23.81.152])
  Authentication-Results: mail-a.sr.ht;
    dkim=pass header.d=nasilyan.com [email protected]
  DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=lists.sr.ht; [...]
  Received: from localhost (unknown [46.23.81.154])
  List-Post: <mailto:~sircmpwn/[email protected]>
  List-ID: ~sircmpwn/sr.ht-discuss <~sircmpwn/sr.ht-discuss.lists.sr.ht>
  Sender: ~sircmpwn/sr.ht-discuss <~sircmpwn/[email protected]>
  Received: from mail-10625.protonmail.ch [...]
  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nasilyan.com; [...]
  Date: Mon, 12 Oct 2026 05:34:33 +0000
  To: <[email protected]>, ~sircmpwn/[email protected]
  From: <[email protected]>
  Subject: Re: unlisted source repo visibility on unlisted projects
  Message-ID: <[email protected]>
  In-Reply-To: <[email protected]>
  References: <[email protected]>
  Feedback-ID: 144157602:user:proton
  X-Spam-Status: No, score=-1.162 required=6.31 tests=[DKIM_SIGNED=-0.01,
    DKIM_VALID=-0.3, DKIM_VALID_AU=-0.1, DMARC_PASS=-0.001,
    HEADER_FROM_DIFFERENT_DOMAINS=0.249, MAILING_LIST_MULTI=-1,
    SPF_HELO_NONE=0.001, SPF_PASS=-0.001]

Messages from SourceHut pass SPF checks and DKIM checks for both the
original "From:" domain (in this case d=nasilyan.com) and SourceHut's
mailing list domain (d=lists.sr.ht) when checked on naja.horus-it.com,
my personal MX.

-Ralph
_______________________________________________
mailop mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to