[DMARC Sucks!] (Was Re: Google Gmail mailing list bounces)

[황병희]

On Wed, Mar 13 2019, Ralph Seichter wrote:
> * Emanuel Berg:
>
>> Yeah, but is this something that is mandatory to have? Is this (the
>> lack of a DKIM sig) the explanation to the problem with my mail [...]
>
> Are you aware of how DMARC works, in detail? DMARC relies on both DKIM
> and SPF. https://dmarcian.com/domain-checker/?domain=zoho.eu shows that
> the DMARC policy for this domain is "reject". Since you don't use DKIM
> signatures, it is down to only SPF, so if the SPF check fails, the DMARC
> policy applies.
>
> That means you ask the recipient MTA to reject all mail apparently
> originating at zoho.eu whenever the SPF check is unsuccessful. Adding
> DKIM to the mix is no silver bullet, but I personally would not publish
> DMARC policies "quarantine" or "reject" had I only SPF at my disposal!

Indeed, i don't like DMARC's alignment policy. So i removed all dmarc stuffs
in my domain's DNS. Actually she breaks all mails from Mailing lists.

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//