On Tuesday, April 19, 2022 12:00:19 AM EDT Scott Kitterman wrote:
> > Concern 2
> > Since the longest current PSL entry has 5 segments, the longest
> > organizational domain is 6 segments.   The "jump to 5" logic needs to be
> > changed to "jump to 6".
> 
> What PSL entries that are 5 long are you worried about?  When we looked at
> this before, 5 seemed sufficient.  Changing the number, now, isn't a big
> deal.

OK, I checked.  Here's the list:

*.compute.amazonaws.com.cn
cn-north-1.eb.amazonaws.com.cn
cn-northwest-1.eb.amazonaws.com.cn
*.elb.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
s3.dualstack.ap-northeast-1.amazonaws.com
s3.dualstack.ap-northeast-2.amazonaws.com
s3.dualstack.ap-south-1.amazonaws.com
s3.dualstack.ap-southeast-1.amazonaws.com
s3.dualstack.ap-southeast-2.amazonaws.com
s3.dualstack.ca-central-1.amazonaws.com
s3.dualstack.eu-central-1.amazonaws.com
s3.dualstack.eu-west-1.amazonaws.com
s3.dualstack.eu-west-2.amazonaws.com
s3.dualstack.eu-west-3.amazonaws.com
s3.dualstack.sa-east-1.amazonaws.com
s3.dualstack.us-east-1.amazonaws.com
s3.dualstack.us-east-2.amazonaws.com
app.os.stg.fedoraproject.org
users.scale.virtualcloud.com.br
it1.eur.aruba.jenv-aruba.cloud
cloud.jelastic.open.tim.it
functions.fnc.fr-par.scw.cloud
nodes.k8s.fr-par.scw.cloud
nodes.k8s.nl-ams.scw.cloud
nodes.k8s.pl-waw.scw.cloud

I don't think any of these are a problem.  Worst case registered domains under 
these PSDs will need to publish a record for their subdomains, but I don't see 
any evidence (after a quick look) any of these are used in email.

Shorter than this, you do start to see names that reasonably might appear in 
email such as:

schools.nsw.edu.au
pvt.k12.ma.us
chtr.k12.ma.us
paroch.k12.ma.us

I think 5 is the right number.

Scott K





_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to