I changed it in a pull request a few weeks ago.

If you don't stop on the first psd=y that is not the original domain,
you get the wrong result if there are DMARC records above the psd=y.

I sent this example on June 21, link is
https://mailarchive.ietf.org/arch/msg/dmarc/T-8NX63L8ilHPhHXMygKdTJ6zMM/

a NXDOMAIN (or psd=y, doesn't matter)
b.a blah
c.b.a psd=y
d.c.b.a blah
e.d.c.b.a NXDOMAIN

I think the org domain for e.d.c.b.a is d.c.b.a.

If you don't stop at the psd=y, you get b.a as the org domain which still looks 
wrong to me.

The description in the current draft gets d.c.b.a.

Thanks.  I remember now.  I viewed this as bug fixing the documentation, not 
any kind of substantive design changes.

Right, we all agreed what result we wanted, but without the stop this case got the wrong answer.

Regards,
John Levine, [email protected], Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to