Petr Novák,

> in this specific case I was just testing our mail server with all 
> possible DMARC settings and I always tried the same test case on gmail 
> to see how they handle that.

And thereby surfaced a bug in Gmail's error messages, very cool!

> I actually used "p=reject sp=none" on one domain for a while. The 
> problem was I managed mail server for the main domain but I didnt have 
> access to any of the subdomains. It took some time to find out which 
> subdomains are used for sending emails and create their own p=none DMARC 
> policies.

Surely all of that subdomain sending information would have been visible to you 
in aggregate DMARC reports within days of publishing a p=none record for the 
parent domain, long before you reached the point where you could safely switch 
to p=reject?

- Roland
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to