Posted by xmddmx 1 day ago
Oh god the slop.
Only an LLM would describe DMARC as just "one DNS record".
It doesn't have to be just one record, but it doesn't have to be more than one record either.
Because i doubt that has worked at all in the last decade.
Yes, a proper email authentication stack has DMARC + SPF + DKIM. But each of these is a separate protocol.
This also doesn't take into consideration the other protocols that have arisen BIMI, APRF, MTA-STS / TLS-RPT and are at even lower levels of adoption.
BIMI is a pay-to-spam protocol that helps senders, you can add a rule to postfix to mark it as such.
APRF is a draft, and likewise helps senders, not receivers.. not sure why anyone would want to adopt this standard. A little closer to DMARC reports, but sharing PI that you owe no sending server.