On 12/09/2013 04:17 PM, Dave Crocker wrote:
This all feels like a nascent FAQ entry or even a BCP...
Probably both, and a brief FAQ could reference the BCP. I think there's a range of practice and opininion out there around wildcarding - I'd avoid it in the shorter FAQ format. I've got a few minutes during a conference call, so what the heck - feel free to use or ignore as you wish.
Franck, do we want a whole recipe like that in-line in the FAQ? You could link to that from a short entry for more detail...
"For a non-sending domain, an SPF "-all" record and a DMARC "p=reject" policy with reporting enabled is recommended. The domain owner should use whatever report handling mechanism or service they prefer, but it would be best if it can generate an alert on traffic over a configurable threshold so that abuse or attacks at-scale are recognized. For more detail, please follow this link: [URL]"
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
