On Fri 15/May/2020 20:26:24 +0200 Seth Blank wrote: > https://trac.ietf.org/trac/dmarc/ticket/63 > > A published DMARC record that consists solely of "v=DMARC1; p=none" is > syntactically valid, but is semantically equivalent to having no record at > all. > > From an ecosystem perspective, especially in Europe, data has been shared > showing an increasing number of domains putting in bare p=none records, and > then claiming that they are implementing DMARC and have some layer of > protection against spoofing of their domain. > > Explicitly making this case invalid would remove confusion from the ecosystem, > and allow any checker that is up to spec to properly flag a bare p=none record > as being the same as not having a record at all. > > Should we make it invalid to have p=none without a reporting address?
No. A bare "v=DMARC1; p=none" still behaves better than NXDOMAIN, and may cut the number of necessary queries. We should instead recommend it. Best Ale -- _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
