On Mon, 2019-06-03 at 15:38 -0700, Carl Byington via mailop wrote: > We can (manually) compensate for errors in dmarc records. For > example,booking.com has a p=reject, but we see mail "From: > .*@booking.com" dkimsigned by sg.booking.com. Strict dmarc would > reject that. We enforce arequirement that mail from booking.com be > signed by either booking.comor sg.booking.com. There are other > domains with similar errors.
Unless I misunderstand something, I'm quite sure this is allowed by DMARC in relaxed mode (which booking.com uses, as it is the default). You can sign with a sub-domain or parent domain as long as they share the same organizational domain.
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
