News for hackers. Stuff that matters.
Re:Poste.io – Complete Mail Server by georgyo on Wednesday February 22, 2023 @06:25PM (#34904565)
ARC is what you need, it a similar signing as DKIM, but resigns a message.

https://en.m.wikipedia.org/wiki/Authenticated_Received_Chain

Re:Poste.io – Complete Mail Server by AceJohnny2 on Wednesday February 22, 2023 @06:33PM (#34904651)
Interesting. I see a gotcha though:

> Validating an ARC chain only makes sense if the receiver trusts the ARC signers. In fact, an ARC chain can be counterfeited,[3] so ARC processing applies when receivers trust the good faith of ARC signers, but not so much their filtering practices.

Is there any documentation on how GMail and Hotmail onboard a ARC-using domain? Their documentation is very... sparse.

Re:Poste.io – Complete Mail Server by Avamander on Thursday February 23, 2023 @08:55AM (#34910602)
The same way they're gathering intel on domain/IP trustworthyness.