Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread Stephen J. Turnbull
Terry Zink writes: > Seeing as how there isn't any consensus on how MTAs should display > things, Outlook's implementation of displaying multiple > sender/from/reply-to fields is on-par with almost anyone else's. That criterion ("no consensus") is like saying that since there's no consensus o

Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread Terry Zink
>> Sender in its present incarnation is not particularly useful, >> period. > I don't disagree. I just think Outlook's display makes it worse than > useless. The Outlook client is used in many places - it hooks up with the Exchange MTA but also with multiple other mail services like Yahoo Mail,

Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread Stephen J. Turnbull
MH Michael Hammer (5304) writes: > How does the recipient know that the NPO has permission? In fact, > how does the recipient know that it is really the NPO if it is > spoofing the existing donor's email address? He doesn't, and he doesn't. That's my point: absent some form of authentication,

Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread Stephen J. Turnbull
Terry Zink writes: > > And third (the killer) the recipients aren't going to recognize > > the new address, and so it's going to look as suspicious as the > > stupid Outlook-style headers. > > What's "stupid" about Outlook style headers? How should it look? Technically, maybe nothing, in th

Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread Terry Zink
> And third (the killer) the > recipients aren't going to recognize the new address, and so it's > going to look as suspicious as the stupid Outlook-style headers. What's "stupid" about Outlook style headers? How should it look? -- Terry -Original Message- From: dmarc [mailto:dmarc-boun.

Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread Stephen J. Turnbull
John Levine writes: > > From: "John Doe (j...@dmarc-abuser.com) via NPO" > > I would try some tests particularly at AOL before I did that. AOL > mail tends to reject anything that looks like a munged AOL address. > > The least painful approach may be to tell people with AOL addresses,

Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread John Levine
> From: "John Doe (j...@dmarc-abuser.com) via NPO" I would try some tests particularly at AOL before I did that. AOL mail tends to reject anything that looks like a munged AOL address. The least painful approach may be to tell people with AOL addresses, sorry, please get a different address.

Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread Hector Santos
On 3/9/2015 8:01 PM, Steve Atkins wrote: But this seems contrary to information from OpenSPF: http://www.openspf.org/Best_Practices/Webgenerated The key component is to ensure that the SMTP "MAIL FROM" address is from your domain. After that, adding "Sender:" or "Reply-To:" headers is good eti

Re: [dmarc-ietf] Sending email on behalf of?

2015-03-10 Thread M. Hammer
Jason, You can pattern your approach on what we at American Greetings do for our card notifications. The non-profit should send as themselves (without a sender field) and put something in the subject line that indicates the individual who is making the request through the non-profit. You can