On November 1, 2021 10:29:46 PM UTC, John Levine <[email protected]> wrote:
>It appears that Joe Humphreys <[email protected]> said:
>>We send tens of millions of such messages daily. These are messages where
>>the From address is [email protected], and the DKIM
>>signing domain is just organization.com.
>>
>>I suggest again that the simple answer is for the DMARC record itself to
>>specify the organizational domain. This is orthogonal to how you discover
>>the DMARC record.
>
>One of the points of the org domain is to provide a default policy for
>hostnames like sharepoint12.dallas.organization.com that aren't
>supposed to send mail and don't have a DMARC record at all.
>
>I see how a pointer in a DMARC record could handle this other domain
>is allowed to sign my mail, but I don't see how it provides the
>default for all of the random hosts under organziation.com.
Isn't that policy discovery? I think we have that covered already.
Scott K
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc
