[dmarc-discuss] DMARC thwarted already?

Murray Kucherawy msk at fb.com
Fri Jun 6 15:46:26 PDT 2014


On 6/5/14, 7:42 PM, "John Levine via dmarc-discuss"
<dmarc-discuss at dmarc.org> wrote:

>>Presumably, if VBR is already an RFC, why couldn't DMARC integrate with
>>it? As a large
>>receiver I would never trust a set supplied by the sender, but if I had
>>a handful of locally
>>defined vouching services, then I could use that to bypass a DMARC
>>enforcement in the event
>>that the message passes SPF and DKIM, yet fails alignment.
>
>As one of the authors of VBR, I think that'd be a dandy idea.

There¹s an open source VBR implementation in OpenDKIM if anyone wants to
build an experiment.

-MSK




More information about the dmarc-discuss mailing list