It appears that Benny Pedersen via mailop <[email protected]> said: >xaf via mailop skrev den 2026-08-27 15:48: >> Benoit Panizzon via mailop a écrit le 27/08/2026 à 10:26 : >>> Until shortly, this did not cause any issues as vm.imp.ch has a >>> matching SPF entry. >> permerror result: ipv4 and ipv6 are unknown mechanisms. >> https://mxtoolbox.com/SuperTool.aspx?action=spf%3avm.imp.ch&run=toolpage >> >> As Rainer suggests, a single DKIM key for all and a CNAME record for >> each domain is arguably the best solution. > >CNAME breaks DNSSEC
Only if you don't know what you're doing. $ dig _smtp._tls.dmarc.fail txt +dnssec ; <<>> DiG 9.10.6 <<>> _smtp._tls.dmarc.fail txt +dnssec ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10864 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ;; QUESTION SECTION: ;_smtp._tls.dmarc.fail. IN TXT ;; ANSWER SECTION: _smtp._tls.dmarc.fail. 3600 IN CNAME _mtasts.abuse.net. _smtp._tls.dmarc.fail. 3600 IN RRSIG CNAME 8 4 3600 20261028000000 20260827040134 58563 dmarc.fail. AMQd2PIGAGrcJEDw71DEZ1JYj/2gKENQCzya4joalghJTfLlqX4x8lpn X6guz2tWLkkLjefk0hHQPGvAaS+I6QvDbAGy/xfTJEnKK4nKzaBDV7hD 13jfbIYhI+kso/uwetiSAbXqanNPGclU6txTesj6y54ncdfR6XtXUNpf byI= _mtasts.abuse.net. 3569 IN TXT "v=TLSRPTv1;rua=https://mta-sts.abuse.net/v1/tlsrpt,mailto:[email protected]"; _mtasts.abuse.net. 3569 IN RRSIG TXT 8 3 3600 20261028000000 20260827040132 52233 abuse.net. cncZnsoDzk7/VyJUtSeytjFAVwXemXObnWryBUm3CTcFHeTrCdi5mPiN vEplix4vL1ZvPT2PEy/1koef9vzNEB1VAaw9MI9Eod1L4XsHmVPgpfz9 aGuu/TVhHsCl3kjTjmkZK5tHfOl4YduGGrK28E4eJ7qGd1lyLTwXJ0UV Kqw= _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
