[dmarc-discuss] A bit quiet?

Shal Farley shals2nd at gmail.com
Sun Oct 25 16:00:56 PDT 2015


Scott,

> So the idea is that arbitrary data added from an untrusted sender 
> (unknown reputation) is sufficient to override DMARC p=reject?

No, that isn't the idea at all.

It is up to the receiving service to decide how to handle the ARC information, but the guidance is not to simply accept it carte-blanche in that way. Particularly in the case of a null reputation the disposition of the message would most likely rest on whatever evaluation the receiver would have made had there been no ARC info.[1]

A quick read of the draft specification and/or recommended usage document is a worthwhile investment of your time if you want to understand the proposal.
http://arc-spec.org/

-- Shal
[1] 3.6 What if none of the intermediaries have been seen previously?
https://tools.ietf.org/html/draft-jones-arc-usage-00



More information about the dmarc-discuss mailing list