P.S.: Steffen Nurpmeso wrote in <20231103002256.iibfi%[email protected]>: |Matus UHLAR - fantomas via Postfix-users wrote in | <[email protected]>: ||>Jens Hoffrichter via Postfix-users wrote in ||> <CAFPt6W_xnY48aX5ocqGuwuSVvvOj2dksRoFc=2mv1X=g9lz...@mail.gmail.com>: ||>|On Mon, Oct 30, 2023 at 8:12 PM Steffen Nurpmeso via Postfix-users ||>|<[email protected]> wrote: ||> ... ||>|> Btw i would wonder: why do -- as email operators -- still use DKIM ||>|> at all, since there is ARC and it also offers signatures and ||>|> verification? The OpenSSL (-users) ML uses it, and it only. ||> ... ||>|Because Google / Gmail / Google Workspace will put out DKIM ||>|requirements for every email from bulk senders from Feb 1st - not ARC ||>|requirements. From what I understand, DMARC alignment only happens on ||>|SPF and DKIM alignment, not on ARC alignment - and because of that, ||>|DKIM is relevant for us. ... ||ARC is third-party signature basically saying that ||"DMARC was okay when we receive this e-mail". ... ||with DKIM, everyone signs their own mail, so this 3rd-party trust issue \ ||does ||not appear. ... ||SPF is here to block this e-mail, and SRS is one of techniques to rewrite ||envelope sender to your domain, while keeping enough of intormation \ ||for you ||to later see that the mail indeed was forwardd through your server, \ ||if the ||forward fails. ... ||DMARC on domain simply configures, that all mail from that domain passes ||DKIM ot SPF check from that domain, and what to do with mail that \ ||does not ||pass either. ||(once more: DKIM applies on header From:, SPF on envelope from:). ... |I personally see this differently. ...
Funnily i just now got while sending a mail to not more than about i think two dozen gmail accounts: Nov 15 18:31:54 postfix/smtp[30872]: 32CC41605F: host gmail-smtp-in.l.google.com[66.102.1.27] said: 421-4.7.28 Our system has detected an unusual rate of unsolicited mail. To 421-4.7.28 protect our users from spam, mail has been temporarily rate limited. 421-4.7.28 Please visit 421-4.7.28 https://support.google.com/mail/?p=UnsolicitedRateLimitError to 421 4.7.28 review our Bulk Email Senders Guidelines. t17-20020a0560001a5100b0032fc38481c6si6035120wry.1009 - gsmtp (in reply to end of DATA command) Funny. Postfix then scheduled them and got them through next. I find the linked page so funny i could cry. But i am sure all of DKIM, ARC, SPF and DMARC are for good. --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt) _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
