Conversation
K. Ryabitsev
monsieuricon
PSA: just having a DKIM-Signature: header in your email isn't really enough, unless it has a d= part matching your From: address.
E.g., this is good:
From: foo@example.com
DKIM-Signature: v=1; d=example.com; [...]
This, on the other hand, serves no real purpose outside of Google:
From: foo@example.com
DKIM-Signature: v=1; d=example-com.20210112.gappssmtp.com; [...]
When there is no DKIM alignment, DMARC-enforcing servers will fall back to only using the SPF record, which doesn't work at all with mailing lists unless they rewrite the From: header.
So, please-please properly set up your DKIM infrastructure if you send messages to mailing lists. Or at the very least don't put p=reject into your DMARC policy.
E.g., this is good:
From: foo@example.com
DKIM-Signature: v=1; d=example.com; [...]
This, on the other hand, serves no real purpose outside of Google:
From: foo@example.com
DKIM-Signature: v=1; d=example-com.20210112.gappssmtp.com; [...]
When there is no DKIM alignment, DMARC-enforcing servers will fall back to only using the SPF record, which doesn't work at all with mailing lists unless they rewrite the From: header.
So, please-please properly set up your DKIM infrastructure if you send messages to mailing lists. Or at the very least don't put p=reject into your DMARC policy.
0
0
5