Property AuthorAuthentication
- Namespace
- MailFathom.Domain.Emails.Authentication
- Assembly
- MailFathom.Domain.dll
AuthorAuthentication
Gets what was established about the author the message displays, which is a separate conclusion.
public AuthorAuthenticationOutcome AuthorAuthentication { get; }Property Value
Remarks
Authenticated is reached two ways and neither of them believes the
From header on its own. A trusted Pass is the receiving server's own statement
that the displayed domain passed under its published policy, so the displayed domain is the answer. Failing
that, an authenticated identity that is the displayed domain, sits beneath it, or holds it beneath itself is
the same claim reached without DMARC. A suffix relation at a label boundary means whoever publishes the signing
key was delegated that zone by the displayed domain or delegated the displayed domain themselves, so it rests
on DNS control flowing down the tree rather than on a policy nobody read. Two names that merely share a parent
stay unrelated, and no organizational domain and no public suffix list is computed to reach any of it.
Failed comes from Fail alone, and it ends the question rather than falling through to that second route: the receiving server reached it with the displayed domain's own published policy in hand, so it outranks an identity comparison made here without one. Every other DMARC result leaves the second route open, which is how most mail actually arrives.