alt Hacker NewsIsn't that the purpose of DKIM and SPF already?
Replies
warkdarrior • today at 4:41 PM
daneel_w • today at 4:46 PM
Yes and no. DKIM signs part of the envelope to help recipients detect alteration (by verifying authenticity), SPF locks down the permissible origins for the sender. SPF is in itself imperfect and can in some situations be exploited on open-access shared systems. If the two are used in concert they offer decent protection.
➕ show 2 replies
DKIM and SPF validate a message. DMARC sets a policy as to what to do with it (quarantine/reject.)