> On 6 Apr 2021, at 10:36, Florian.Kunkel--- via mailop <[email protected]> > wrote: > > ! > * to all those sending email without their very own static IP-Address, > * and all newly set up MTA infrastructure > ... especially ESPs using IP pools professionally for their numerous > customers' mail. > ! > > As you might already have observed we are evaluating DKIM signatures > @t-online.de for a while now. > We are starting to expect aforementioned IP infrastructure to have all > messages DKIM signed conforming DMARC, so header from and mail from must be > aligned. > unsigned messages, unaligned or messages failing validation otherwise, will > be rejected while in SMTP session.
Just so I understand what t-online.de <http://t-online.de/> is announcing. t-online.de <http://t-online.de/> is looking for full alignment between the SPF domain (5321.from) AND the d=domain (DKIM) with the header from (5322.from). Additionally, t-online.de will reject any message that fails either SPF or DKIM authentication even if the other method passes. t-online.de <http://t-online.de/> is rejecting any message that does not align with both SPF and DKIM. t-online.de <http://t-online.de/> is rejecting any message that is not signed by DKIM. Is this a correct summary of the announcment? > worst come first > Expect this procedure to hit you the earlier, the more traffic we are already > used to reject from your infrastructure. > > Do not expect DMARC reports anytime soon. > Equally we won't check for DMARC policies at the moment; ... but p=reject > could become an option. If I understand the above statements, you are going much stricter than the DMARC spec and asking for a level of authentication currently beyond anything anyone else is doing. Your prerogative, of course, I just want to make sure I understand it in order to explain it to clients and ESPs as this such a tectonic shift in authentication requirements. laura -- Having an Email Crisis? We can help! 800 823-9674 Laura Atkins Word to the Wise [email protected] (650) 437-0741 Email Delivery Blog: https://wordtothewise.com/blog
_______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
