On Monday, February 21, 2022 1:07:15 PM EST John Levine wrote:
...
> >If us.com had published a DMARC record with psd=y, then we would know for
> >sure that cust.us.com is the org domain.  I think when walking up you want
> >the first record for policy domain and the last non-PSD record for org
> >domain.
> Now I'm confused.  The policy and org domain used to be the same, but now
> they seem to be different.  That's not necessarily wrong, but if we're
> going to separate them, then we need to be crystal clear what the function
> of each is.
...

I don't think that's right.

Today, if I send mail from 5322.From example.kitterman.com that is signed by 
dkim.kitterman.com, if example.kitterman.com has a DMARC record, then that 
would be the policy domain, but the message would meet the requirement for 
relaxed alignment because both example.kitterman.com and dkim.kitterman.com 
have the same org domain (kitterman.com).  I don't think what I'm proposing is 
any different.

Scott K


_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to