News for hackers. Stuff that matters.
Re:How Spam Filtering Works: From SPF to DKIM to Blacklists by gorkish on Friday September 07, 2018 @06:05PM (#17938008)
DMARC is for the sender ARC is for the receiver/intermediary. The problem with DMARC (really it's not a problem with DMARC but we'll play like it is) is that if you do something like set up a Gmail account to forward mail to your "real" yahoo account then yahoo might not accept the message from Gmail since from yahoo's perspective Gmail is trying to dump a forged message into your box that they didn't originate. As a sender I don't really give a shit that the other end is broken by some lazy person.
Re:How Spam Filtering Works: From SPF to DKIM to Blacklists by mehrdadn on Friday September 07, 2018 @06:23PM (#17938113)
How is the message considered forged when it passes DKIM though?
Re:How Spam Filtering Works: From SPF to DKIM to Blacklists by Ionlyprograminc on Friday September 07, 2018 @07:55PM (#17938526)
A message can still be considered a DMARC failure since the check depends on both SPF and DKIM. You can have various failures like recipient rewrites and general SPF/DKIM failures which will fail DMARC a significant amount of the time.