Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: Make the DMARC check to be enforced regardless of DMARC record existence #685

Open
1 task
chandr1000 opened this issue Mar 6, 2024 · 0 comments
Labels
new feature New feature.

Comments

@chandr1000
Copy link

chandr1000 commented Mar 6, 2024

I would like to propose a feature request for Maddy: the ability to customize behavior of DMARC checking.
Perhaps with this directive example:

check.dmarc {
    none_action ignore | quarantine | reject
}

none_action will override the DMARC check behavior for any sender domain that has no DMARC record, in turn allowing SPF check & DKIM check to verify the incoming email and will do action as configured when neither SPF nor DKIM passed the checks. For now the default value is ignore

This would allow us to follow the best practices of email security and deliverability, as recommended by Gmail, Yahoo Mail and other major mail providers (https://www.valimail.com/blog/the-new-requirements-for-email-delivery-at-gmail/)).

They have recently made DMARC mandatory (starting in April 2024) which helps prevent spoofing and phishing attacks. By allowing users to opt-in to DMARC checks enforcement, we can increase the trust and reputation of our email service, as well as protect our users from malicious emails.

  • I'm willing to help with the implementation
@chandr1000 chandr1000 added the new feature New feature. label Mar 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
new feature New feature.
Projects
None yet
Development

No branches or pull requests

1 participant