Heads up that I'm going to be looking carefully at use of "SHOULD"
throughout the document when it comes to AD Evaluation.  An example that
gave me pause:

On Tue, Mar 5, 2024 at 6:30 AM Alessandro Vesely <[email protected]> wrote:

> in section 5.5.1, Publish an SPF Policy for an Aligned Domain, the last
> sentence says:
>
>                                     The SPF record SHOULD be constructed
>     at a minimum to ensure an SPF pass verdict for all known sources of
>     mail for the RFC5321.MailFrom domain.
>

Why is this a SHOULD?  In fact the whole section is made up of three
SHOULDs, so I could do none of them for my own reasons and still claim to
be "doing DMARC".  Are we OK with that?

(Maybe we are, but I want to be sure.)

-MSK, AD hat on but askew
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to