Change to Mail Infrastructure - SPF and DKIM verification will now be enforced

[Ben Cooksley]

On Fri, Dec 4, 2015 at 11:28 PM, Jan Kundrát <jkt at kde.org> wrote:
> On Friday, 4 December 2015 10:56:42 CET, Ben Cooksley wrote:
>>
>> Note that in the long run with DMARC looming you will need to switch
>> to #2 anyway, and keeping your current behaviour will likely lead to
>> mail from people who use Yahoo / AOL / etc ending up in the spam
>> folder with many mailing list members. I'll be starting a discussion
>> regarding taking this step on KDE systems at some point in the near
>> future (switching to DMARC compatible policies).
>>
>> For more information, please see http://wiki.list.org/DEV/DMARC
>
>
> Do I understand your plan correctly? The following projects appear to not
> re-sign their ML traffic, and they mangle headers at the same time. If I
> understand your plan correctly, this means that I won't be able to use my
> @kde.org addresses on mailing lists of these projects, for example:
>
> - Qt,
> - Debian,
> - Gentoo,
> - OpenStack,
> - anything hosted at SourceForge,
> - and many, many more, essentially anybody who were ignoring DKIM.
>
> Please, change your plans, this is obviously a huge no-go.

*Sigh*.

Debian has already committed (prior to any of this) to making their
mailing lists DMARC compliant by ceasing the alteration of mail
passing through their lists.

It is an extreme pity these mailing list providers have demonstrated
such an extreme disregard for standards which aim to eliminate
forgeries and ensure people cannot be digitally misrepresented. This
is why we had to change Bugzilla a while back to send as
bugzilla_noreply at kde.org instead of the acting user's email address -
because Yahoo's enforcement policy meant GMail always placed mail from
Yahoo users in the spam folder.

I'll grant an extension until 31 January, however I would like to see
commitments from some of these to improve their infrastructure.

>
> Cheers,
> Jan

Regards,
Ben

>
>
> --
> Trojitá, a fast Qt IMAP e-mail client -- http://trojita.flaska.net/