Re: state of openarc.org

[Jered Floyd <jered@xxxxxxxxxxxxx>]

I use OpenARC to sign outgoing messages, but have no evidence that it "does anything".  I've tried for years to figure out how get, for example, google.com to use it as a trust indicator but there is no documentation, way to register, etc.  I'd love to how if it helps or if I'm just burning CPU cycles.

In practice, I've found that despite implementing SRS, ARC, DKIM, SPF, and aggressive inbound spam filtering, any amount of forwarded (e.g. procmail-style bent pipe) messages that are considered spam causes extreme delivery problems to GMail.  It's quite frustrating.

--Jered

----- On Jan 23, 2024, at 4:33 PM, A. Schulze sca@xxxxxxxxxxxxxxxxx wrote:

> Am 23.01.24 um 00:47 schrieb Pete Holzmann:
>> Thanks for doing this. I haven't yet looked at your new version, but this could
>> easily be
>> due to the bug I reported months ago, showing  that *all* of the OpenZZZ milters
>> have a
>> long term bug, failing to properly parse a wide variety of valid Auth headers.
> 
> Pete,
> 
> I think, you talk about
> https://github.com/trusteddomainproject/OpenDKIM/issues/186, right?
> Well, yes, that may be a bug. But I don't believe, this is a reason for the
> defect I saw.
> 
> My question to all list participants: does anybody use OpenARC to create ARC
> seal data
> and has a proof these data could be verified by OpenARC or an other ARC
> implementation?
> 
> Thanks