alt Hacker NewsVaguely related question: what is the go-to open DMARC check implementation these days? I mean the part that checks _received_ mail against DMARC rules. It used to be opendmarc, but it seems people have been dropping it for a while because of history of breaking changes and general lack of good stewardship [1]. Anyone using pydmarc [2]?
It's hard to find good info on this since 99% of search hits are people talking about setting up DMARC from the _sender_ side.
[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014058#39
Replies
1over137 • today at 12:02 PM
Indeed opendmarc seems practically abandonware.
rspamd is what I use.
➕ show 1 reply
ksajadi • today at 2:34 PM
We use sendops.dev for that and the rest of reputation management on AWS.
I use rspamd.
This might be a little heavy if you’re solely looking for DMARC validation, but I use the other parts of rspamd as well for inbound email.
https://rspamd.com/modules/dmarc/
For a library, I mainly write Go and I use https://github.com/emersion/go-msgauth (formerly known as go-dkim).