>I'm trying to improve my understanding of the third-party sender problem when, >for reasons >technical and political, you want to maintain a distance between >organizational domain and >the working domain.
DKIM and DMARC and for that matter SPF are not designed to distinguish among authorized senders for the same domain. If you want to manage multiple mail streams independently, use subdomains. >- From addresses should look like: [email protected] . Use something like [email protected]. They can delegate email.intelli-shop.com to you, then you can set up all of the DKIM and SPF and DMARC stuff for that subdomain any way you want. If you look at the mail coming from large brands, you'll see that's pretty common. DKIM selectors are for key management, not to create multiple mail streams visible to outsiders. You're not the first to have that misunderstanding but I don't know how to make it any clearer in the documentation. R's, John _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
