Files
lasuite-messages/docs
Riël NotermansandSylvain Zimmer d89e08cc10 (inbound) add ARC relay-trust: inbound_auth "arc" + arc_gate
New "arc" inbound_auth mode derives dkim/dmarc only from an ARC-sealed
ARC-Authentication-Results whose outermost sealer is in
SPAM_CONFIG["trusted_arc_sealers"] (empty = any valid seal); plaintext
headers are never trusted.

New SPAM_CONFIG["arc_gate"] (off|spam|drop) marks or drops inbound mail
lacking a valid trusted seal, so a publicly-reachable mta-in effectively
accepts only mail sealed by a trusted relay. The chain is verified with
dkimpy; a verification/DNS failure never spams or drops.

core/mda/arc.py holds the shared verifier. Config reference in
docs/spam-config.md.
2026-07-23 10:28:47 +02:00
..
2026-07-22 16:11:19 +02:00