Hello,
It is not clear to me if RFC 7489 provides a mechanism to distinguish between
existing and non-existing domains, and PSDs from ODs. I did read Appendix
A.4 and A.6.
When I tested different DMARC checker tools online, I found a variety of
responses for legitimate ODs concur but the responses vary when faced
with invalid input (such as '.com') or a TLD ('com'). There is also a
discrepancy
when I input PSDs.
Here is a screenshot of an informal survey I ran today:
<https://github.com/banbreach/dmarc-psd-test/blob/main/dmarc-checker-tools-survey.png>
What is the correct behavior for a DMARC checker when faced with different
non-OD
inputs? I believe a stricter error handling will help, in particular for PSDs,
given the
ongoing efforts for RFC9091.
Regards,
Suman
_______________________________________________
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
