On 2014-06-03 06:59, Matt Vernhout via dmarc-discuss wrote:
Michiel,

I'd recommend you look at using a branded sub domain for your ESP (esp.mycompany.com <http://esp.mycompany.com>) and CRM (crm.mycompany.com <http://crm.mycompany.com>) solutions - then you only need to authenticate against on vendor for each domain and not against multiple vendors in a single record.

That only works to a point. If you are, for example, migrating between a Google Apps environment and a Office 365 environment, you may well have mail coming in and out of both environments for an indefinite period of time.

SPF will fail for one or the other if you rely on includes and the vendor you're including uses up your entire quota of SPF DNS lookups.

From a DMARC perspective though, DKIM can be used to sign mail and has no such limitation.

--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren

_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to