Hi Ken,

Happy New Year!  :-)

> And thinking about it ... I don't think the normal usage of dist(1)
> SHOULD cause any problems.  With regards to SPF, since it uses the
> MAIL FROM header that should be fine, since your MAIL FROM should be
> set properly to the identity of the dist(1)er.  Since you aren't
> modifying any headers when using dist(1), the DKIM signature should
> still be valid.

I think you're right on both counts, and that's what I used to think
too.  I know SPF, a bit about DKIM, and still less about DMARC, but I
think DMARC complains because although SPF and DKIM are individually
happy the headers are not in `alignment': DKIM's are still upstream
compared to SPF.  Failure can result.

-- 
Cheers, Ralph.

-- 
nmh-workers
https://lists.nongnu.org/mailman/listinfo/nmh-workers

Reply via email to