>From section 4.6:
To illustrate, for a message with the arbitrary RFC5322.From domain
of "a.b.c.d.e.mail.example.com", a full DNS Tree Walk would require
the following five queries, in order to locate the policy or
Organizational Domain:
* _dmarc.a.b.c.d.e.mail.example.com
* _dmarc.e.mail.example.com
* _dmarc.mail.example.com
* _dmarc.example.com
* _dmarc.com
What should the evaluator do if one of these results in a CNAME that either:
a) points outside of the tree
b) results in a loop pointing at a previously evaluated record
--
Alex Brotman
Sr. Engineer, Anti-Abuse & Messaging Policy
Comcast
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc