Re: [mailop] DMARC with broken DKIM

2018-04-10 Thread Brandon Long via mailop
On Tue, Apr 10, 2018 at 1:04 AM Vittorio Bertola < vittorio.bert...@open-xchange.com> wrote: > > > Il 10 aprile 2018 alle 2.15 Brandon Long via mailop > ha scritto: > > > > > > Google does not yet trust third party ARC signatures, yes. We're open > to manually > > adding some as they become avai

Re: [mailop] DMARC with broken DKIM

2018-04-10 Thread Vittorio Bertola
> Il 10 aprile 2018 alle 2.15 Brandon Long via mailop ha > scritto: > > > Google does not yet trust third party ARC signatures, yes.  We're open to > manually > adding some as they become available, but overall, it's a chicken and egg > thing > so far, there aren't enough of them yet for us

Re: [mailop] DMARC with broken DKIM (was: Re: DMARC p=quarantine pct=0)

2018-04-09 Thread John Levine
In article you write: >-=-=-=-=-=- > >We've also seen various banks and other large companies who seem to >specifically only use SPF with DMARC, as a way of disallowing forwarding, I >guess. More likely their mail comes from a lot of places with hostile mail admins, and while the overall admins

Re: [mailop] DMARC with broken DKIM (was: Re: DMARC p=quarantine pct=0)

2018-04-09 Thread John Levine
In article you write: >Sometimes I'm thinking DMARC should have enforced DKIM, and not allowed >to have only a match in {SPF, DKIM}, because it leads to issues like >broken-DKIM working-SPF domains not noticing things are wrong even >though they *are*… That was ADSP. It was even worse than DMARC

Re: [mailop] DMARC with broken DKIM

2018-04-09 Thread Brandon Long via mailop
On Mon, Apr 9, 2018 at 4:55 PM Leo Gaspard wrote: > On 04/10/2018 01:04 AM, Brandon Long wrote: > > We've also seen various banks and other large companies who seem to > > specifically only > > use SPF with DMARC, as a way of disallowing forwarding, I guess. > > > > With ARC, you can actually "pa

Re: [mailop] DMARC with broken DKIM

2018-04-09 Thread Leo Gaspard via mailop
On 04/10/2018 01:04 AM, Brandon Long wrote: > We've also seen various banks and other large companies who seem to > specifically only > use SPF with DMARC, as a way of disallowing forwarding, I guess. > > With ARC, you can actually "pass" the SPF pass through the forwarder. > > Not that there's a

Re: [mailop] DMARC with broken DKIM (was: Re: DMARC p=quarantine pct=0)

2018-04-09 Thread Brandon Long via mailop
We've also seen various banks and other large companies who seem to specifically only use SPF with DMARC, as a way of disallowing forwarding, I guess. With ARC, you can actually "pass" the SPF pass through the forwarder. Not that there's anywhere near wide enough acceptance of ARC to make that yo