Re: [mailop] DMARC and subdomains

2023-06-18 Thread John Levine via mailop
It appears that Andrew C Aitchison via mailop said: >> FWIW, future development provides for walking down the DNS tree. >> So a DMARC verifier would lookup _domainkey.foo.bar.example.com and >> _domainkey.bar.example.com before reaching _domainkey.example.com. > >Are we talking about _dmarc...exa

Re: [mailop] DMARC and subdomains

2023-06-18 Thread Andrew C Aitchison via mailop
On Sun, 18 Jun 2023, Alessandro Vesely via mailop wrote: On Fri 16/Jun/2023 22:41:39 +0200 Gellner, Oliver via mailop wrote: On 16.06.2023 at 16:13 Jaroslaw Rafa via mailop wrote: [...] So at least one (and important one, given the size of this mail service) implementation of DMARC does not us

Re: [mailop] DMARC and subdomains

2023-06-18 Thread Alessandro Vesely via mailop
On Fri 16/Jun/2023 22:41:39 +0200 Gellner, Oliver via mailop wrote: On 16.06.2023 at 16:13 Jaroslaw Rafa via mailop wrote: [...] So at least one (and important one, given the size of this mail service) implementation of DMARC does not use the PSL. eu.org is located in the private domain sectio

Re: [mailop] DMARC and subdomains

2023-06-16 Thread Gellner, Oliver via mailop
> On 16.06.2023 at 16:13 Jaroslaw Rafa via mailop wrote: > > At some time I noticed that Gmail started to indicate DMARC failure. I > checked and found out that the admins of parent eu.org domain put a DMARC > record on it, which caused emails from my domain rafa.eu.org (not from the > parent eu.o

Re: [mailop] DMARC and subdomains

2023-06-16 Thread Andy Smith via mailop
Hi Todd, On Fri, Jun 16, 2023 at 09:31:58AM -0400, Todd Herr via mailop wrote: > Yes, the DMARC protocol does describe the search for the organizational > domain for the RFC5322.From domain in an email message. Yep, got itnow; I want the subdomain policy ("sp"). Not sure how I missed that, or the

Re: [mailop] DMARC and subdomains

2023-06-16 Thread Todd Herr via mailop
On Fri, Jun 16, 2023 at 10:11 AM Jaroslaw Rafa via mailop wrote: > Dnia 16.06.2023 o godz. 09:31:58 Todd Herr via mailop pisze: > > Yes, the DMARC protocol does describe the search for the organizational > > domain for the RFC5322.From domain in an email message. > > > > It doesn't rely on the "_

Re: [mailop] DMARC and subdomains

2023-06-16 Thread Jaroslaw Rafa via mailop
Dnia 16.06.2023 o godz. 09:31:58 Todd Herr via mailop pisze: > Yes, the DMARC protocol does describe the search for the organizational > domain for the RFC5322.From domain in an email message. > > It doesn't rely on the "_domainkey" hostnames (that's DKIM), but it does > currently rely on the Publ

Re: [mailop] DMARC and subdomains

2023-06-16 Thread Todd Herr via mailop
On Fri, Jun 16, 2023 at 9:21 AM Andy Smith via mailop wrote: > Hi, > > Let's say I have domain example.com with SPF, DKIM and DMARC > records. I've put an A record in there to point foo.bar.example.com > at someone else's IP address. > > Probably some cron job or other automated task on that host

[mailop] DMARC and subdomains

2023-06-16 Thread Andy Smith via mailop
Hi, Let's say I have domain example.com with SPF, DKIM and DMARC records. I've put an A record in there to point foo.bar.example.com at someone else's IP address. Probably some cron job or other automated task on that host has sent an email from usern...@foo.bar.example.com that has ended up at g