Re: AR headers

[Matus UHLAR - fantomas <uh...@fantomas.sk>]

On 20.10.25 14:42, Benny Pedersen via users wrote:
>Authentication-Results	apache.org; auth=none
>
>imho AuthRes plugin should not use this, only the ARC-*
>
>apache.org do not add the ARC-Authentication-Results, not even for 
>maillists users :=)
>
>    authres_ignored_authserv microsoft.com
>    authres_ignored_authserv mx.microsoft.com
>    authres_ignored_authserv ncua2.onmicrosoft.com
>
>    authres_trusted_authserv apache.org
>
>should it be ignored ?

What is your point?

We have authres_networks and authres_trusted_authserv to configure who to 
trust, are you trying to implying that it does not work properly?


-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Microsoft dick is soft to do no harm

Re: AR headers

[Benny Pedersen via users <us...@spamassassin.apache.org>]

Matus UHLAR - fantomas skrev den 2025-11-01 20:52:
> On 20.10.25 14:42, Benny Pedersen via users wrote:
>> Authentication-Results	apache.org; auth=none
>> 
>> imho AuthRes plugin should not use this, only the ARC-*
>> 
>> apache.org do not add the ARC-Authentication-Results, not even for 
>> maillists users :=)
>> 
>>    authres_ignored_authserv microsoft.com
>>    authres_ignored_authserv mx.microsoft.com
>>    authres_ignored_authserv ncua2.onmicrosoft.com
>> 
>>    authres_trusted_authserv apache.org
>> 
>> should it be ignored ?
> 
> What is your point?
> 
> We have authres_networks and authres_trusted_authserv to configure who 
> to trust, are you trying to implying that it does not work properly?

yes, there is imho a race here of some kind, ARC-Authentication-Results 
and Authentication-Results is evaled in one botle so results is unstable

others can try to verify my claims here

i have authres_networks all, yes i know it should not be all, but i 
still test results