Using a CNAME at _dmarc.example should not be a problem, as long as the CNAME target is a TXT record. The DNS resolver functions should should handle this seamlessly. This does sound like a vendor software problem.
I am aware of DKIM records being deployed using CNAMEs pointing to a TXT record target. Has anyone seen the above error condition when testing DKIM records? This definitely sounds like an issue with the software. Nobody should shy away from publishing DMARC records that are CNAMEs to DMARC TXT records elsewhere. Using this design should be strongly encouraged. tim
_______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
