When SPF/DKIM domain is a parent of the From domain, result may be aligned or unaligned, but Tree Walk is not needed.
"Not a child" was correct as stated. If the first Tree Walk determines that sub1.example.com is the organization, then we are only interested in SPF)DKIM domains that are in the sub1.example.com subtree (including exact match or child) DF On Wed, Mar 13, 2024, 7:18 AM Alessandro Vesely <[email protected]> wrote: > On Wed 13/Mar/2024 11:23:43 +0100 Douglas Foster wrote: > > > > The reality is that the Tree Walk is an inefficient and unreliable way of > > obtaining an answer, particularly because of the risk of DNS timeouts. > As > > a result, the Tree Walk should be avoided whenever possible. In fact, > the > > secondary tree walks for SPF and DKIM can frequently be avoided: > > > > - When strict alignment is required. > > - When the SPF/DKIM domain is not verified. > > - When the SPF/DKIM domain matches the From domain. > > - When the SPF/DKIM domain is a parent of the From domain. > > > However, if the parent domain has psd=y it's not aligned. > > > > - When a string comparison shows that the SPF/DKIM domain is not a > child > > of the organizational domain > > You mean if they have different TLDs? > > > Best > Ale > -- > > > > > > > _______________________________________________ > dmarc mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/dmarc >
_______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
