アドオン
このアドオンについて
Thunderbird Auth Results Filter evaluates incoming mail using Authentication-Results headers written by your trusted mail servers. Suspicious messages can be moved to a review folder before they stay in your Inbox.
What it does
How scoring works
The add-on uses a low-pass, high-combo approach. A single weak signal should not be enough to classify a message as suspicious. Review and high-risk decisions are mainly driven by combinations of independent signals.
Trust model
This follows the trust-boundary model of Authentication-Results: the header is useful only when it was written by mail infrastructure you control or trust.
Privacy
Setup
Limitations
What it does
- Reads SPF, DKIM, and DMARC results from Authentication-Results headers.
- Uses only authentication servers that you explicitly mark as trusted.
- Scores sender identity alignment, From-domain patterns, and composite risk signals.
- Moves uncertain messages to an Auth Review folder.
- Can optionally move high-risk messages directly to Junk. This is off by default.
- Keeps all message scoring, logs, and settings local on your device.
How scoring works
- Score 0-49: Normal. The message stays in the Inbox.
- Score 50-99: Review. The message is moved to the Auth Review folder.
- Score 100+: High risk. The message is moved to Review, or to Junk if you enable that option.
The add-on uses a low-pass, high-combo approach. A single weak signal should not be enough to classify a message as suspicious. Review and high-risk decisions are mainly driven by combinations of independent signals.
Trust model
- You must configure at least one trusted Authentication-Results authserv-id.
- Headers from untrusted authserv-id values are ignored for scoring.
- The add-on does not automatically trust authserv-id values found in received messages.
- If no trusted authentication server is configured, authentication-based scoring remains inactive.
This follows the trust-boundary model of Authentication-Results: the header is useful only when it was written by mail infrastructure you control or trust.
Privacy
- No message contents, headers, logs, or settings are sent to external services.
- All scoring is performed locally in Thunderbird.
- The optional setup assistant can perform MX lookups to suggest likely mail server domains. This is disabled by default and only runs after explicit user action.
- Address book whitelist integration is also optional and disabled by default.
Setup
- Open the add-on Options page.
- Add the authserv-id of your incoming mail server under Trusted Authentication Servers.
- Use the default Auth Review folder, or configure a review folder per account.
- Review score reasons from the message popup or diagnostics log if you want to tune rule weights.
Limitations
- This is not a replacement for server-side spam filtering.
- The add-on does not run SPF, DKIM, or DMARC checks itself. It reads the results your mail server already wrote.
- If your mail provider does not write Authentication-Results headers, authentication-based scoring cannot work.
- Some spam may still reach your Inbox, and some legitimate mail may occasionally need to be moved back or whitelisted.
- The add-on never modifies message headers or message source.
