On July 27, 2022 8:22:19 AM UTC, Alessandro Vesely <[email protected]> wrote:
>On Mon 25/Jul/2022 16:23:43 +0200 Scott Kitterman wrote:
>> On July 25, 2022 1:27:07 PM UTC, Alessandro Vesely <[email protected]> wrote:
>>>
>>> In an example I posted, I showed that mail.psd.org.example cannot work to
>>> authenticate From: [email protected]. However, a sibling like
>>> signing.org.example would be in relaxed alignment.
>>
>> I believe we were pretty much agreed on if a PSD sends mail for itself it
>> has to use strict alignment.
>
>
>If I got it right this time, the following is a non-strict alignment which
>should work:
>
>5322.From domain psd.example.com
>
>5321.MailFrom domain mail.example.com
>
>DKIM signature d= signing.example.com
>
>
>Where _dmarc.psd.example.com has psd=y, all the identifiers admit example.com
>as the org domain.
Technically I think that's correct, although I'm not aware of any real PSDs for
which that approach would be available.
Scott K
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc
