I wasn't aware of ARC, an extension of the protocol that allows for chaining of DMARC checks: When all systems in an forward chain support ARC, the forwarders can now prove that they verified the original DKIM signature as valid, and the final recipient can in turn verify the ARC signatures.
This finally makes the operation of mailing lists under DMARC feasible (though for me, it means that I'll have to switch to a different MLM)...

Sign in to participate in the conversation
INFRa Mastodon

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!