Re: state of openarc.org

[Benny Pedersen <me@xxxxxxx>]

Jered Floyd skrev den 2024-01-31 14:44:
> To the original question, at least, my inbound verification (with 
> Rspamd) does not validate the ARC-Seal from this list.  From my 
> previous message via the mailing list headers:
>
> [...]
> Received: from dahlem.somaf.de (dahlem.somaf.de [185.183.157.243])
> 	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
> 	 key-exchange X25519 server-signature RSA-PSS (2048 bits) 
> server-digest SHA256)
> 	(No client certificate requested)
> 	by mailhub-use-1a.convivian.com (Postfix) with ESMTPS id 12B0E1005163
> 	for <jered@xxxxxxxxxxxxx>; Wed, 31 Jan 2024 13:37:18 +0000 (UTC)
> Authentication-Results: mailhub-use-1a.convivian.com;
> 	dkim=pass header.d=convivian.com header.s=default header.b=Kr2I+ZLk;
> 	spf=pass (mailhub-use-1a.convivian.com: domain of 
> "openarc-users+bounces-80-jered=convivian.com@xxxxxxxxxxx" designates 
> 185.183.157.243 as permitted sender) 
> smtp.mailfrom="openarc-users+bounces-80-jered=convivian.com@xxxxxxxxxxx";
> 	arc=reject ("seal check failed: fail, {[1] = 
> sig:dahlem.somaf.de:reject}");
> 	dmarc=pass (policy=none) header.from=convivian.com
> [...]

dmarc unaligned should really be handled on maillists, before breaking 
aligned, if this is solved it would be a step forward

when dmarc is aligned i see no problem without arc at all, here it would 
be a step forward if all arc seal and arc sign it, to downstream 
testing, maillist should not be untrusted in dmarc, there is just no 
test to make it trusted or not, sadly