On Wed, Mar 18, 2020 at 6:17 PM John Levine <jo...@taugh.com> wrote: > >The issue PSD is attempting to address is mail sent as a nonexistent > >subdomain. For example, irs.gov doesn't have a subdomain called > >auditors.irs.gov, so irrespective of any irs.gov DMARC policy, I could > send > >email as m...@auditors.irs.gov without limitation. ... > > I have less sympathy for that argument. I do a hard reject of any > mail with a nonexistent bounce address which I don't think is unusual. > > PSD as I understand it is to address the same issue the organizational > domain does, but a level up, in a group of organizations that have > some administrative connection. The issue is people who publish A and > MX records without covering DMARC records. They're not supposed to do > that but they do, and PSD is one way of figuring out who needs to fix what. >
Sorry, yes, my example was faulty. -MSK
_______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc
