upvote
This was my second hackernews submit [0]! So, not even https in 2014 :)

When I ran that server, outlook.com was also the only one that would blackhole my email for no known reason. Support was unhelpful and also could not point to any reason. I've since given up, but for a short time it was glorious, email to family would not leave the lan and we could send attachments of arbitrary size.

[0] https://news.ycombinator.com/item?id=7708882

reply
You adopted it the moment it was announced? Really?

Is there a risk some people on this thread are mixing up DKIM and DMARC?

DKIM = proving that an email was sent from a specific domain using cryptography. Good for spam fighting and deliverability.

DMARC = telling receivers how to handle mail that fails authentication.

DMARC is primarily useful for large, complex organizations where email admins may not be aware of everyone inside the org who is sending mail that advertises the domain in the From header, or organizations that might be targeted by impersonation attacks (e.g. phishing). Being able to tell recipients "yes we absolutely have our act together so feel free to reject or spamfolder unauthenticated email" is great for killing phishing campaigns, and being able to request reports is great for finding that one sales org that signed up for a guerrilla marketing SaaS that's impersonating them.

But for small personal domains the value isn't that high.

reply
> DMARC = telling receivers how to handle mail that fails authentication.

No. DMARC is about if the from address has to match the address used in dkim/spf

reply
No DMARC is about telling receivers which of SPF/DKIM are valid, what to do with it when it fails, and where to send a report to. Oh look.. like Mike said.
reply
To be clear, I am saying this is incorrect.

DMARC is primarily about "alignment" (switching SPF from caring about the envelope sender to instead using the from header). Yes, it does also tangentially address those other points, but the primary reason it was adopted was to prevent spoofing of from headers (where in original spf that was a non-goal)

reply
> You adopted it the moment it was announced? Really?

A specification exists since 2012, 14 years ago. 10 years ago it was already old.

reply
Email is the largest social network on earth (8.3 Billion addresses)

10 years is nothing. I'm sure there's still millions of companies globally who still aren't properly signing mail with DMARC.

reply