← Back to context

Comment by avian

11 hours ago

Vaguely related question: what is the go-to open DMARC check implementation these days? I mean the part that checks _received_ mail against DMARC rules. It used to be opendmarc, but it seems people have been dropping it for a while because of history of breaking changes and general lack of good stewardship [1]. Anyone using pydmarc [2]?

It's hard to find good info on this since 99% of search hits are people talking about setting up DMARC from the _sender_ side.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014058#39

[2] https://pypi.org/project/dmarc/

I use rspamd.

This might be a little heavy if you’re solely looking for DMARC validation, but I use the other parts of rspamd as well for inbound email.

https://rspamd.com/modules/dmarc/

For a library, I mainly write Go and I use https://github.com/emersion/go-msgauth (formerly known as go-dkim).