On 12/09/2013 01:49 AM, Andreas Schulze wrote:
Google suggest to set a dmarc record for domains not used to send email:
http://googleonlinesecurity.blogspot.de/2013/12/internet-wide-efforts-to-fight-email.html?m=1
Anybody just doing so?
Should I set simple "p=reject" or also request reports?
We're doing so at a major US financial institution (not the one Tim
mentioned). We're trying to get the creation of empty SPF "-all" and
DMARC records made standard for all of our non-sending domains.
Ideally this is something that domain management vendors like
MarkMonitor would be doing automatically...
--Steve.
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)