> For many years, there was no real way to verify that you really got the email the person that the From header states. DMARC doesn't really assert your identi

> For many years, there was no real way to verify that you really got the email the person that the From header states. DMARC doesn't really assert your identity---it asserts the identity of the server. Remember that you can also use PGP to assert _yourself_, and this works well with mailing lists (your mail client will hopefully distinguish between the signed message and the mailing list footer, which is unsigned). It also persists---if a mailing list is stripping DMARC headers, then that doesn't help you any.