Alan Hodgson:
I really believe that's incorrect. Relaxed alignment specifically
means you can
sign with a subdomain's key or use a subdomain for SPF.
Read sections 3.1.2 and 10.4 of that same document, for instance.
Alan,
you're write! DMARC folks told me so, too.
DMARC Relax alignment is true for:
- RFC5322.From: example.com
- DKIM or SPF authentication identifier: sub.example.com
an even true for:
- RFC5322.From: a.example.com
- DKIM or SPF authentication identifier: b.example.com
that was new to me. So I vote now for "not AOL's fault"
Andreas
