[feedback] relay.firefox.com fails DMARC on postfix MTA [just like all other mails sent from firefox.com]

[pdehaan]

name: Firefox user 14066756 score: 3 ✯ ✯ ✯ created: 2020-10-16 url: https://addons.mozilla.org/firefox/addon/private-relay/reviews/1609727

relay.firefox.com fails DMARC on postfix MTA just like all other mails sent from firefox.com via amazonses service so this will only work for me until DMARC is enforced

[pdehaan]

/paging Dr @Micheletto

[say-yawn]

We should compare other services that is also an message transfer agent (MTA) with scoring websites like https://en.internet.nl/mail/relay.firefox.com/430472/#control-panel-9 to see how we compare against them.

[groovecoder]

ping @moz-astults should we see if we can bump up our DMARC policy to be more strict now?

[moz-astults]

We should compare other services that is also an message transfer agent (MTA) with scoring websites like https://en.internet.nl/mail/relay.firefox.com/430472/#control-panel-9 to see how we compare against them.

Since this test was done, it looks like we have made this policy more strict

$  dig _dmarc.relay.firefox.com TXT

; <<>> DiG 9.16.8-Ubuntu <<>> _dmarc.relay.firefox.com TXT
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27834
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;_dmarc.relay.firefox.com.      IN      TXT

;; ANSWER SECTION:
_dmarc.relay.firefox.com. 3600  IN      TXT     "v=DMARC1;p=quarantine;rua=mailto:relay-dmarc@mozilla.com;adkim=r;aspf=r"

;; Query time: 60 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Mon Jun 21 14:17:40 MDT 2021
;; MSG SIZE  rcvd: 137

Re-tested here: https://en.internet.nl/mail/relay.firefox.com/545612/#control-panel-9

@groovecoder how strict do we want this? We can look into what steps we need to take (if any) to change this policy to reject if we'd like.