[dmarc-ietf] Re: Review of draft-ietf-dmarc-arc-to-historic

[Alessandro Vesely <[e-mail]>]

On Tue 14/Jul/2026 16:27:44 +0200 Tero Kivinen wrote:
> Alessandro Vesely writes:
>
>> Incoming messages with a broken chain should be rejected. Then, only 
>> the top ARC set can be trusted/ whitelisted. Iki.fi can in turn 
>> whitelist forwarders it trusts, which appear in the top ARC set of 
>> inbound traffic. (Does it have its own whitelisting mechanism?)
>
> As we do not do filtering based on the DKIM/DMARC/SPF/ARC we do not 
> have specific whitelisting mechanism. We do add 
> ARC-Authentication-Results which do record status of those when the 
> mail was received by iki.fi, but we leave the filtering to final mail 
> box providers.


If a message with a broken ARC chain arrives at iki.fi, an ARC set added by 
iki.fi would also result in a broken chain.  Unless iki.fi preemptively removes 
existing (broken) ARC sets.


> We do have some users who do WANT to get all spam, i.e., they might 
> use their iki.fi address as spamtrap.


Do they communicate their stance to iki.fi?


Best
Ale
--