pub fn judge_sender(
results: Option<&AuthResults>,
mailing_list: bool,
sender_domain: Option<&str>,
) -> (Trust, Proof)Expand description
The verdict on the sender, and why. A DMARC failure is a forgery when the
domain asks receivers to act on it (quarantine, reject, or a provider’s
result that does not say); with p=none, or on a mailing list, which
rewrites what it relays, it only leaves the sender unverified.
A proof counts only for the domain you are shown (sender_domain, the
address in From): a valid signature of another domain proves nothing about
it (anyone can sign with their own domain), and neither does a DMARC pass
for another From than the one shown (a message carrying two).