Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

What DMARC Protects You From, and What It Does Not

senderledger.com

Post reply on HN
Print view View original

11–20 of 47 posts

Re: What DMARC Protects You From, and What It Does Not

#11

Post by oogali »

avian wrote: post #5

Vaguely related question: what is the go-to open DMARC check implementation these days? I mean the part that checks _received_ mail against DMARC rules. It used to be opendmarc, but it seems people have been dropping it for a while because of history of breaking changes and general lack of good stewardship [1]. Anyone using pydmarc [2]? It's hard to find good info on this since 99% of search hits are people talking a…

I use rspamd.

This might be a little heavy if you’re solely looking for DMARC validation, but I use the other parts of rspamd as well for inbound email.

https://rspamd.com/modules/dmarc/

For a library, I mainly write Go and I use https://github.com/emersion/go-msgauth (formerly known as go-dkim).

Re: What DMARC Protects You From, and What It Does Not

#12

Post by 1over137 »

avian wrote: post #5

Vaguely related question: what is the go-to open DMARC check implementation these days? I mean the part that checks _received_ mail against DMARC rules. It used to be opendmarc, but it seems people have been dropping it for a while because of history of breaking changes and general lack of good stewardship [1]. Anyone using pydmarc [2]? It's hard to find good info on this since 99% of search hits are people talking a…

Indeed opendmarc seems practically abandonware.

rspamd is what I use.

Re: What DMARC Protects You From, and What It Does Not

#13

Post by philosopherNoob »

sam_lowry_ wrote: post #3

> Every email carries two "from" addresses I made a presentation about exactly the same subject many years ago, but I was not shy of separating the SMTP protocol (RFC 821 and the following ) and the email message (RFC 822 and the following). It makes the link between SPF, DKIM and DMARC much clearer. Anyway. The article covers just the bare minimum, and in the most obscure way. For those interested in the inner worki…

Are those posts available without logging in? This sounds like good stuff but I can’t access it.

Re: What DMARC Protects You From, and What It Does Not

#14

Post by sam_lowry_ »

philosopherNoob wrote: post #13
sam_lowry_ wrote: post #3

> Every email carries two "from" addresses I made a presentation about exactly the same subject many years ago, but I was not shy of separating the SMTP protocol (RFC 821 and the following ) and the email message (RFC 822 and the following). It makes the link between SPF, DKIM and DMARC much clearer. Anyway. The article covers just the bare minimum, and in the most obscure way. For those interested in the inner worki…

Are those posts available without logging in? This sounds like good stuff but I can’t access it.

I think he reposts them on his consulting page https://www.sh.consulting/blog and no, I am not affiliated. Just keeping an eye on the email deliverability topic as a hoppy.

Re: What DMARC Protects You From, and What It Does Not

#16

Post by actionfromafar »

oogali wrote: post #11
avian wrote: post #5

Vaguely related question: what is the go-to open DMARC check implementation these days? I mean the part that checks _received_ mail against DMARC rules. It used to be opendmarc, but it seems people have been dropping it for a while because of history of breaking changes and general lack of good stewardship [1]. Anyone using pydmarc [2]? It's hard to find good info on this since 99% of search hits are people talking a…

I use rspamd. This might be a little heavy if you’re solely looking for DMARC validation, but I use the other parts of rspamd as well for inbound email. https://rspamd.com/modules/dmarc/ For a library, I mainly write Go and I use https://github.com/emersion/go-msgauth (formerly known as go-dkim).

Url seems to be https://docs.rspamd.com/modules/dmarc/

Re: What DMARC Protects You From, and What It Does Not

#17

Post by brightball »

1over137 wrote: post #12
avian wrote: post #5

Vaguely related question: what is the go-to open DMARC check implementation these days? I mean the part that checks _received_ mail against DMARC rules. It used to be opendmarc, but it seems people have been dropping it for a while because of history of breaking changes and general lack of good stewardship [1]. Anyone using pydmarc [2]? It's hard to find good info on this since 99% of search hits are people talking a…

Indeed opendmarc seems practically abandonware. rspamd is what I use.

That is good to know. I thought it was maintained by Valimail?

Re: What DMARC Protects You From, and What It Does Not

#18

Post by oogali »

actionfromafar wrote: post #16
oogali wrote: post #11

Earlier quoted context omitted.

I use rspamd. This might be a little heavy if you’re solely looking for DMARC validation, but I use the other parts of rspamd as well for inbound email. https://rspamd.com/modules/dmarc/ For a library, I mainly write Go and I use https://github.com/emersion/go-msgauth (formerly known as go-dkim).

Url seems to be https://docs.rspamd.com/modules/dmarc/

Thanks for the correction. I guess I had a mis-paste that stripped out the leading part of the hostname... weird.

Re: What DMARC Protects You From, and What It Does Not

#19

Post by lxgr »

sylware wrote: post #6

I think DMARC is missing email address with IPv[46] literals support. As being self-hosted, without paying the DNS mob, I am still blocked to send email to gmail.com because such email addresses do throw out of whack gogol code. Email addresses with IPv[46] literals are intrinsincly stronger than SPF. If in the envelope or any of the 'from' headers (if my memory does not fail me, there are few more headers to scan),…

Arguably, missing IP literal domain support is pretty far down the list of things creating today's actual mail delivery walled garden.
Post reply on HN