On 12/4/18 9:09 AM, Benny Pedersen wrote: > Bill Cole skrev den 2018-12-04 03:58: > >> DKIM and DMARC *ONLY* operate on headers, *NEVER* on the envelope. > > SPF is part of DMARC so not correct
I think he meant that DKIM related to DMARC means the DKIM signature has to align/match the From: header domain to pass which is DKIM_VALID_AU in SA. In the case of SPF, DMARC will pass if the envelope-from domain check hits SPF_PASS in SA. DMARC_PASS = SPF_PASS || DKIM_VALID_AU DMARC_FAIL = !SPF_PASS && !DKIM_VALID_AU DMARC_REJECT = DMARC_FAIL && DMARC record contains p=reject -- David Jones
