On Wed 13/Mar/2024 11:23:43 +0100 Douglas Foster wrote:
The reality is that the Tree Walk is an inefficient and unreliable way of
obtaining an answer, particularly because of the risk of DNS timeouts. As
a result, the Tree Walk should be avoided whenever possible. In fact, the
secondary tree walks for SPF and DKIM can frequently be avoided:
- When strict alignment is required.
- When the SPF/DKIM domain is not verified.
- When the SPF/DKIM domain matches the From domain.
- When the SPF/DKIM domain is a parent of the From domain.
However, if the parent domain has psd=y it's not aligned.
- When a string comparison shows that the SPF/DKIM domain is not a child
of the organizational domain
You mean if they have different TLDs?
Best
Ale
--
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc
