Rolf E. Sonneveld wrote:
> On 12-12-16 07:47, Roland Turner via dmarc-discuss wrote:
>> it's not at all clear why "p=reject sp=none" would ever be a good idea.
>
> actually I have two customers using mail for both their office automation
> and for business processes. Both of them use their domain for office
> automation mail and a subdomain thereof for business process mail. A
> DMARC policy for their office environment may not have impact on their
> business process mail traffic.
OK, but presumably the business process system isn't generating new subdomains
on an hourly/daily basis (or indeed, ever). Assuming that simply fixing the BPS
outbound email stream to have valid DKIM signatures is not an option (e.g.
delivery via corporate gateway), then presumably this is better dealt with as:
_dmarc.example.com TXT "p=reject"
_dmarc.bps.example.com TXT "p=none"
than with a blanket sp=none in the parent domain?
- Roland
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
