On July 27, 2022 6:15:03 PM UTC, John Levine <[email protected]> wrote:
>According to Scott Kitterman <[email protected]>:
>>>If I got it right this time, the following is a non-strict alignment which
>>>should work:
>>>
>>>5322.From domain psd.example.com
>>>
>>>5321.MailFrom domain mail.example.com
>>>
>>>DKIM signature d= signing.example.com
>>>
>>>Where _dmarc.psd.example.com has psd=y, all the identifiers admit
>>>example.com as the org domain.
>
>Only if it publishes a DMARC record. If it doesn't psd.example.com is its own
>org domain and the
>other two are not aligned with it.
>
>>Technically I think that's correct, although I'm not aware of any real PSDs
>>for which that approach would be available.
>
>Having looked at all of the DMARC records for every name in the PSL, I am
>quite sure there are no such
>PSDs and this example is hypothetical and unrealistic.
Agreed. The good news is that even in the contrived case the design still can
handle it.
Scott K
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc
