[clamav-users] Mailing list DMARC problem

[Alessandro Vesely]

On Wed 31/Oct/2018 13:23:27 +0100 Maarten Broekman wrote:

> Or, I don't know, recipients that are enforcing DMARC could simply follow the
> steps from the previous section. The mailing list doesn't own the messages sent
> to it (we don't see "From: clamav-users").
> 
> Recipients should whitelist the mailing list per:
> https://dmarc.org/wiki/FAQ#Is_there_special_handling_required_to_receive_DMARC_email_from_mailing_lists.3F

Original Authentication Results is wishful thinking of 2012.  If it worked, ARC
wouldn't be needed.  But then ARC doesn't solve the problem either, because in
practice you don't know what every sender in the world is doing, unless you're
Google.

Assessing all the mailing lists that their users subscribe to is a daunting
task for mailbox providers, especially since list subscription doesn't involve
the mailbox provider at all.

Best
Ale
--