>Is it better to do this, or to hold off on enforcement until the senders >can also get reports from us? Since not all senders request reporting, I >assume it's better to enforce than to do nothing at all.
I would much, much rather have reports without enforcement rather than the other way around. Enforcement invariably produces surprises, and without the reports it's pretty much impossible to figure out what happened. You might look at the DMARC records for the domains you're getting mail from. I expect you'll find a fair number like mine with p=none, who just want the reports. R's, John _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
