https://trac.ietf.org/trac/dmarc/ticket/63
A published DMARC record that consists solely of "v=DMARC1; p=none" is syntactically valid, but is semantically equivalent to having no record at all. >From an ecosystem perspective, especially in Europe, data has been shared showing an increasing number of domains putting in bare p=none records, and then claiming that they are implementing DMARC and have some layer of protection against spoofing of their domain. Explicitly making this case invalid would remove confusion from the ecosystem, and allow any checker that is up to spec to properly flag a bare p=none record as being the same as not having a record at all. Should we make it invalid to have p=none without a reporting address? -- *Seth Blank* | VP, Standards and New Technologies *e:* [email protected] *p:* 415.273.8818 This email and all data transmitted with it contains confidential and/or proprietary information intended solely for the use of individual(s) authorized to receive it. If you are not an intended and authorized recipient you are hereby notified of any use, disclosure, copying or distribution of the information included in this transmission is prohibited and may be unlawful. Please immediately notify the sender by replying to this email and then delete it from your system.
_______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
