On Mon 25/Jul/2022 16:23:43 +0200 Scott Kitterman wrote:
On July 25, 2022 1:27:07 PM UTC, Alessandro Vesely <[email protected]> wrote:

In an example I posted, I showed that mail.psd.org.example cannot work to 
authenticate From: [email protected].  However, a sibling like 
signing.org.example would be in relaxed alignment.

I believe we were pretty much agreed on if a PSD sends mail for itself it has 
to use strict alignment.


If I got it right this time, the following is a non-strict alignment which should work:

5322.From domain  psd.example.com       

5321.MailFrom domain  mail.example.com  

DKIM signature d=  signing.example.com


Where _dmarc.psd.example.com has psd=y, all the identifiers admit example.com as the org domain.


Best
Ale
--







_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to