On 12/09/2013 01:49 AM, Andreas Schulze wrote:

Google suggest to set a dmarc record for domains not used to send email:
http://googleonlinesecurity.blogspot.de/2013/12/internet-wide-efforts-to-fight-email.html?m=1

Anybody just doing so?
Should I set simple "p=reject" or also request reports?

We're doing so at a major US financial institution (not the one Tim mentioned). We're trying to get the creation of empty SPF "-all" and DMARC records made standard for all of our non-sending domains.

Ideally this is something that domain management vendors like MarkMonitor would be doing automatically...

--Steve.
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to