Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-21 Thread Alessandro Vesely via mailop
On Mon 20/Feb/2023 09:13:30 +0100 Benny Pedersen wrote: Alessandro Vesely via mailop skrev den 2023-02-20 08:47: The point of ARC is to report authentication results.  A post having only spf=pass becomes unauthenticated after the first hop. inccorect, nexthop can use spf aswell, or not

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-20 Thread Benny Pedersen via mailop
Alessandro Vesely via mailop skrev den 2023-02-20 08:47: The point of ARC is to report authentication results. A post having only spf=pass becomes unauthenticated after the first hop. inccorect, nexthop can use spf aswell, or not Right. Ditto for DMARC rejects/ quarantine, which I don't

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-19 Thread Alessandro Vesely via mailop
On Sat 18/Feb/2023 21:38:55 +0100 Benny Pedersen wrote: Alessandro Vesely via mailop skrev den 2023-02-18 13:49: Mailman cannot verify SPF. envelope sender changes on nexthop, no ? so why is it important ? The point of ARC is to report authentication results. A post having only

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-18 Thread Benny Pedersen via mailop
Alessandro Vesely via mailop skrev den 2023-02-18 13:49: Mailman cannot verify SPF. envelope sender changes on nexthop, no ? so why is it important ? if you meant not to accept spf fail posters, this is still in mta stage to be enforced if wanted not to accept it

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-18 Thread Alessandro Vesely via mailop
On Fri 17/Feb/2023 17:07:33 +0100 Patrick Ben Koetter wrote: Greetings, I'm about to setup a new mailing list server. It will use Mailman 3, which is able to add ARC signatures to incoming messages. The lists will also rewrite the From:-header and to match the lists name and domain. I'm unsure

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-18 Thread Ralph Seichter via mailop
* Patrick Ben Koetter via mailop: > I'm about to setup a new mailing list server. It will use Mailman 3, > which is able to add ARC signatures to incoming messages. The lists > will also rewrite the From:-header and to match the lists name and > domain. I'm unsure if outbound messages should also

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-17 Thread Benny Pedersen via mailop
Tobias Herkula via mailop skrev den 2023-02-17 17:56: Only adding ARC without your own DKIM will make it harder for a lot of people, that are not yet ready to process ARC signatures. in ARC terms it always ORIGINATE on nexthub, but this rule is not for nexthub with DKIM sadly so many

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-17 Thread Benny Pedersen via mailop
Patrick Ben Koetter via mailop skrev den 2023-02-17 17:07: Greetings, I'm about to setup a new mailing list server. It will use Mailman 3, which is able to add ARC signatures to incoming messages. The lists will also rewrite the From:-header and to match the lists name and domain. I'm unsure

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-17 Thread Tobias Herkula via mailop
You don't need ARC if you are munging the 5322.From, but if you are munging the 5322.From add a strict aligned DKIM signature, this makes it easy to filter and trust your lists traffic. If you run multiple lists on the same domain, please do strict alignment between 5322.From AddrSpec and the