<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span><br></span></div><div><span>Actual Sender domain is the one which is being use to send the mail and has done dkim signing for the mail.</span></div><div><span>As an example, This mail, I am sending from my yahoo mail account </span><span style="font-size: 12pt; ">so yahoo.com is the actual sender who</span></div><div><span style="font-size: 12pt; ">is going to do DKIM signing of the message, but RFC 5322.FROM is my gmail account.</span></div><div><span><br></span></div><div><span>Since my yahoo.com has my registered </span><span style="font-size: 12pt; ">and verified gmail account avanishm@gmail.com. </span></div><div><span style="font-size: 12pt; ">I can choose to select my gmail id </span><span style="font-size: 12pt; ">as email FROM (RFC 5322.From). I can do the same
with</span></div><div><span style="font-size: 12pt; ">my gmail account.</span></div><div><span><br></span></div><div><span>I believe many email provider has this facility where you can use your verified email address to send</span></div><div><span>mail from there account. This verified email address can be your work email id, school email</span></div><div><span>id or other web email provider id.</span></div><div><span><br></span></div><div><span>I am trying to evaluate how to handle such cases while implementing DMARC as RFC 5322.From</span></div><div><span>domain will be gmail.com while dkim domain (d=) will be yahoo.com.</span></div><div><span><br></span></div><div><span>Thanks</span></div><div><span>Avanish</span></div><div><span><br></span></div><div><br></div> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div
dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Murray S. Kucherawy <msk@cloudmark.com><br> <b><span style="font-weight: bold;">To:</span></b> "dmarc-discuss@dmarc.org" <dmarc-discuss@dmarc.org> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, March 8, 2012 8:53 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [dmarc-discuss] RFC5322.From different from sender domain<br> </font> </div> <br>
<meta http-equiv="x-dns-prefetch-control" content="off"><div id="yiv1472453323">
<style><!--
#yiv1472453323
_filtered #yiv1472453323 {font-family:"Cambria Math";panose-1:2 4 5 3 5 4 6 3 2 4;}
_filtered #yiv1472453323 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
_filtered #yiv1472453323 {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;}
_filtered #yiv1472453323 {font-family:Times;panose-1:2 2 6 3 5 4 5 2 3 4;}
#yiv1472453323
#yiv1472453323 p.yiv1472453323MsoNormal, #yiv1472453323 li.yiv1472453323MsoNormal, #yiv1472453323 div.yiv1472453323MsoNormal
{margin:0in;margin-bottom:.0001pt;font-size:12.0pt;font-family:"serif";}
#yiv1472453323 a:link, #yiv1472453323 span.yiv1472453323MsoHyperlink
{color:blue;text-decoration:underline;}
#yiv1472453323 a:visited, #yiv1472453323 span.yiv1472453323MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
#yiv1472453323 span.yiv1472453323EmailStyle17
{font-family:"sans-serif";color:#1F497D;}
#yiv1472453323 .yiv1472453323MsoChpDefault
{font-size:10.0pt;}
_filtered #yiv1472453323 {margin:1.0in 1.0in 1.0in 1.0in;}
#yiv1472453323 div.yiv1472453323WordSection1
{}
--></style>
<div>
<div class="yiv1472453323WordSection1">
<div class="yiv1472453323MsoNormal"><span style="font-size:11.0pt;color:#1F497D;">What is the “actual sender domain”? It’s clear what RFC5322.From is, but I don’t know to which one you’re referring.</span></div>
<div class="yiv1472453323MsoNormal"><span style="font-size:11.0pt;color:#1F497D;"> </span></div>
<div class="yiv1472453323MsoNormal"><span style="font-size:11.0pt;color:#1F497D;">I believe Google Apps (for example) has a way to arrange to add signatures that have your domain name rather than (or in addition to) their own, which means
you can get DKIM validation and domain alignment sufficient to satisfy DMARC evaluation. I don’t know about Yahoo! mail or others.</span></div>
<div class="yiv1472453323MsoNormal"><span style="font-size:11.0pt;color:#1F497D;"> </span></div>
<div class="yiv1472453323MsoNormal"><span style="font-size:11.0pt;color:#1F497D;">-MSK</span></div>
<div class="yiv1472453323MsoNormal"><span style="font-size:11.0pt;color:#1F497D;"> </span></div>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt;">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in;">
<div class="yiv1472453323MsoNormal"><b><span style="font-size:10.0pt;">From:</span></b><span style="font-size:10.0pt;"> dmarc-discuss-bounces@blackops.org [mailto:dmarc-discuss-bounces@blackops.org]
<b>On Behalf Of </b>Avanish Mishra<br>
<b>Sent:</b> Thursday, March 08, 2012 5:37 PM<br>
<b>To:</b> dmarc-discuss@dmarc.org<br>
<b>Subject:</b> [dmarc-discuss] RFC5322.From different from sender domain</span></div>
</div>
</div>
<div class="yiv1472453323MsoNormal"> </div>
<div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;"> </span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">This might have been discuss before but i am not clear on DMARC recommendation for handling genuine use cases of RFC5322.FROM domain</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">different from actual sender domain?</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;"> </span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">Currently with most of big email provider like Yahoo Mail, Gmail and other i can register, authenticate and use external email id to send</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">mail. One of the possible use case is that any user can register and use <<a rel="nofollow" ymailto="mailto:user@my-work-domain.com" target="_blank" href="mailto:user@my-work-domain.com">user@my-work-domain.com</a>> as a alternate
email id and use this email id</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">to send mail. This feature can be useful if i am travelling with internet access but no access to my-work-domain network</span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">and want to send mail so that receiver can identify me with my work email id.</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;"> </span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">This mail will be delivered with RFC5322.FROM domain as "my-work-domain.com" and DKIM signing domain will <a target="_blank" href="http://yahoo.com/gmail.com">yahoo.com/gmail.com</a></span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">with the mail provider IP.</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;"> </span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">1. Should the DMARC record of "my-work-domain.com" should be fetch for DMARC processing</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">2. "my-work-domain.com" can have strict policy to reject mails; should the mail be rejected as this will</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;"> definitely fail Identifier Alignment.</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;"> </span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">is it possible to consider domain of sender (Mail header sender) in case RC5322.FROM domain is different?</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;"> </span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">Thanks</span><span style="color:black;"></span></div>
</div>
<div>
<div class="yiv1472453323MsoNormal" style="background:white;"><span style="color:black;">Avanish</span><span style="color:black;"></span></div>
</div>
</div>
</div>
</div>
</div>
</div><meta http-equiv="x-dns-prefetch-control" content="on"><br>_______________________________________________<br>dmarc-discuss mailing list<br><a ymailto="mailto:dmarc-discuss@dmarc.org" href="mailto:dmarc-discuss@dmarc.org">dmarc-discuss@dmarc.org</a><br><a href="http://www.dmarc.org/mailman/listinfo/dmarc-discuss" target="_blank">http://www.dmarc.org/mailman/listinfo/dmarc-discuss</a><br>NOTE: Participating in this list means you agree to the DMARC Note Well terms (<a href="http://www.dmarc.org/note_well.html" target="_blank">http://www.dmarc.org/note_well.html</a>)<br><br><br> </div> </div> </div></body></html>