Povl Hessellund wrote: > We are not alone here. We have all sorts of systems like newsletters (they do > DKIM etc), > HR system, time registration system, other misc systems. Maybe it is 10 > subdomains only, > and maybe we should just create DMARC record for all of them with p=none - > and not > depend on sp=none.
That is my guess, yes. A basic assumption that DMARC makes (indeed, the reason the feedback mechanism exists) is that p=reject may cause legitimate email loss so anyone using it will be closely monitoring their feedback and has spent the time to sort out their existing email streams before turning on p=reject. That exercise would necessarily include identifying legitimate streams that can't [yet] be caused to authenticate, so they would be readily excluded by creating subdomain-specific p=none records, which could be withdrawn over time as the issues are resolved. - Roland _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
