News for hackers. Stuff that matters.

A comment on Ask HN: Best hosted alternative to Google Workspace for email?. Parent comment

Re:Ask HN: Best hosted alternative to Google Workspace for e... by brightball on Saturday February 05, 2022 @10:34PM (#30229124)
If you’re using DMARC the from and the DKIM signature must be aligned or it doesn’t pass. Simply passing any DKIM check isn’t enough.
[ Parent | on HN ]
Re:Ask HN: Best hosted alternative to Google Workspace for e... by upofadown on Sunday February 06, 2022 @08:19AM (#30232247)
Mailbox.org has a DMARC policy of "reject". So receivers that enforced DMARC and did "domain alignment" would reject the email. Does that make what mailbox.org does with the "From:" address OK?
[ Parent | on HN ]
Re:Ask HN: Best hosted alternative to Google Workspace for e... by brightball on Sunday February 06, 2022 @08:29AM (#30232315)
Not if they are still signing it with the private key for the domain.

If an email is sent with a From of @bob.com and DKIM signed using the private key for bob.com…it’s from bob.com.

[ Parent | on HN ]