In article <[email protected]> you write: >Gmail specifies quarantine.
No. sp= is not the same as p= $ host -t txt _dmarc.gmail.com _dmarc.gmail.com descriptive text "v=DMARC1; p=none; sp=quarantine; rua=mailto:[email protected]"; >Verizon.com, aol.com, and yahoo.com (common ownership) specify reject, >reject, and quarantine respectively. No: $ host -t txt _dmarc.verizon.com _dmarc.verizon.com descriptive text "v=DMARC1; p=quarantine; sp=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; rf=afrf; pct=100" $ host -t txt _dmarc.yahoo.com _dmarc.yahoo.com descriptive text "v=DMARC1; p=reject; pct=100; rua=mailto:[email protected];"; AOL and Yahoo both published p=reject after they had large security breaches that let crooks steal their users' address books, and then started sending spam to their users with return addresses of the recipients' friends, leading to many complains and support calls. They use DMARC to outsource the cost of their security failures to unwilling mail admins all over the world. Verizon.net has p=reject while verizon.com has p=quarantine. The former is for their ISP customers, with mail hosted by Yahoo. The latter is their corporate with mail handled by Proofpoint. R's, John _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
