Re: state of openarc.org

[Jered Floyd <jered@xxxxxxxxxxxxx>]

*crickets* Does this mean I'm the only person on the list trying to use OpenARC?

--Jered

----- On Jan 23, 2024, at 5:31 PM, Jered Floyd jered@xxxxxxxxxxxxx wrote:

> I use OpenARC to sign outgoing messages, but have no evidence that it "does
> anything".  I've tried for years to figure out how get, for example, google.com
> to use it as a trust indicator but there is no documentation, way to register,
> etc.  I'd love to how if it helps or if I'm just burning CPU cycles.
> 
> In practice, I've found that despite implementing SRS, ARC, DKIM, SPF, and
> aggressive inbound spam filtering, any amount of forwarded (e.g. procmail-style
> bent pipe) messages that are considered spam causes extreme delivery problems
> to GMail.  It's quite frustrating.
> 
> --Jered
> 
> ----- On Jan 23, 2024, at 4:33 PM, A. Schulze sca@xxxxxxxxxxxxxxxxx wrote:
> 
>> Am 23.01.24 um 00:47 schrieb Pete Holzmann:
>>> Thanks for doing this. I haven't yet looked at your new version, but this could
>>> easily be
>>> due to the bug I reported months ago, showing  that *all* of the OpenZZZ milters
>>> have a
>>> long term bug, failing to properly parse a wide variety of valid Auth headers.
>> 
>> Pete,
>> 
>> I think, you talk about
>> https://github.com/trusteddomainproject/OpenDKIM/issues/186, right?
>> Well, yes, that may be a bug. But I don't believe, this is a reason for the
>> defect I saw.
>> 
>> My question to all list participants: does anybody use OpenARC to create ARC
>> seal data
>> and has a proof these data could be verified by OpenARC or an other ARC
>> implementation?
>> 
> > Thanks