Ask Slashdot: How Useful Are DMARC and DKIM?

Posted by timothy on Sunday November 2, 2014 @05:40AM from the survey-says dept.

whoever57 writes How widely are DKIM and DMARC being implemented? Some time ago, Yahoo implemented strict checks on DKIM before accepting email, breaking many mailing lists. However, Spamassassin actually assigns a positive score (more likely to be spam) to DKIM-signed emails, unless the signer domain matches the from domain. Some email marketing companies don't provide a way for emails to be signed with the sender's domain — instead, using their own domain to sign emails. DMARC doesn't seem to have a delegation mechanism, by which a domain owner could delegate other domains as acceptable signatures for emails their emails. All of these issues suggest that the value of DKIM and DMARC is quite low, both as a mechanism to identify valid emails and as a mechanism to identify spam. In fact, spam is often dkim-signed. Are Slashdot users who manage email delivery actually using DKIM and DMARC?

1 of 139 comments (clear)

Min score:

Reason:

Sort:

Re:working as designed? by Anonymous Coward · 2014-11-02 08:16 · Score: 0, Flamebait

So, how is my neighbor, who isn't very good at anything except making statues (and spilling wine when drunk) supposed to figure this out? She makes statues, and has outsourced her email. She sends an email when she has something for sale, and the unsubscribe link works. What you propose is to deliberately damage her business because she outsources the parts she's not good at. Fuck off.