On Tue, Jun 16, 2026 at 12:04:01PM +1000, Viktor Dukhovni via mailop wrote:
> On Mon, Jun 15, 2026 at 09:02:10PM -0400, John Levine via mailop wrote:
>
> > No, that's not what RFC 9989 says. The psd=y/n tags are expected to be rare.
>
> Confirmed rare for psd=y at present. Of ~4900 public suffix domains
> (the filtered PSL I use for the DANE survey, listing suffixes that
> actually delegate DNS subdomains, rather than just host multi-customer
> web server farms) just queried, just one has a "psd" tag in a DMARC
> record (correctly set to "y"):
>
> _dmarc.qld.gov.au. IN TXT "v=DMARC1; p=reject; sp=none; fo=1;
> rua=mailto:[email protected];
> ruf=mailto:[email protected]; psd=y; ri=86400"
It seems I inadvertently checked only the *non-TLD* public suffixes,
adding the TLDs I find also:
_dmarc.gov. IN TXT "v=DMARC1; p=reject; sp=none; np=reject;
rua=mailto:[email protected]; psd=y"
_dmarc.mil. IN TXT "v=DMARC1; p=reject; sp=none; np=reject;
rua=mailto:[email protected]; psd=y"
_dmarc.bank. IN TXT "v=DMARC1; p=reject; sp=none; np=reject; psd=y;
rua=mailto:[email protected],mailto:[email protected]";
_dmarc.insurance. IN TXT "v=DMARC1; p=reject; sp=none; np=reject; psd=y;
rua=mailto:[email protected],mailto:[email protected]";
Matching John's note about .bank and .insurance.
So far, just one other TLD has a DMARC record (this time without psd=y):
_dmarc.nhk. IN CNAME _dmarc.47xe6gr5j90mwndy--nhk.hosteddmarc.dmarc-dns.com.
_dmarc.47xe6gr5j90mwndy--nhk.hosteddmarc.dmarc-dns.com. IN TXT "v=DMARC1;
p=reject; rua=mailto:[email protected],mailto:[email protected];
ruf=mailto:[email protected],mailto:[email protected]; fo=1; t=n;"
--
Viktor. 🇺🇦 Слава Україні!
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
