Hi Scott, Nice! Thanks for building this. :-)
During interop testing last week, we discovered that some DMARC verifiers mistakenly sent reports to unauthorized 3rd party domains. For example, if I'm publishing a DMARC record for sendgrid.org , but I want reports to be sent to a sendgrid.com address, some additional DNS TXT records must be published. See the (sometimes overlooked) sections 15.6 and 8.2 of the spec, which explain how to properly authorize a 3rd party (external) domain to receive reports. Please extend your assistant to detect when the domains in the rua or ruf fields differ from the main domain, and show users how to set up additional TXT records as per section 8.2. IIRC, last week the interop testing participants recommended that the DMARC dev team change the spec so that verifiers MUST implement the external domain provisions (changing section 15.6 from SHOULD to MUST.) We might as well steer folks in the right direction now -- and your tool could help people do the right thing by authorizing external rua and ruf domains correctly. Regards, Paul Kincaid-Smith SendGrid On Tue, Jul 24, 2012 at 2:01 PM, Scott Kitterman <[email protected]> wrote: > I decided I'd make an aide for constructing DMARC records. > > I'd appreciate feedback on it: > > http://kitterman.com/dmarc/assistant.html > > It would also be nice if it could be linked from dmarc.org. > > Scott K > _______________________________________________ > dmarc-discuss mailing list > [email protected] > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well terms > (http://www.dmarc.org/note_well.html) -- Paul Kincaid-Smith Manager, Email Delivery and Industry Relations w: +1-720-222-0109 SendGrid -- Email Delivery. Simplified. _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
