On Sun, 20 Sep 2026 12:34:16 +0000 Dexter via mailop <[email protected]> wrote:
> I've been looking at how small and mid-size senders configure email > auth. The common landing spot is DMARC p=none with rua set, sometimes > for years. I understand why people start there, but I'm curious what > actually moves a sender off it. I have a guideline handling e-mail setups when I'm unsure about something: Do it like gmail. Not because I particularly like gmail, but because, due to their sheer market dominance, I can be pretty sure doing whatever gmail does will be accepted by everyone and everything out there. gmail announced once that they'd switch from p=none to p=reject in June 2016. Here we are, 10 years later, and gmail hasn't done it yet: dig +short -t txt _dmarc.gmail.com "v=DMARC1; p=none; sp=quarantine; rua=mailto:[email protected]"; As long as gmail considers it too risky and causing too many deliverability issues to configure "p=reject", I'll consider it too risky for me, too. -- Hanno Böck - Independent security researcher https://itsec.hboeck.de/ https://badkeys.info/ _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
