There's a general but unenforced rule that the thing in an MX record can't be a CNAME; the MX has to be canonical.
I have no idea how or why this applies to ADSP, however, since it only cares about TXT records or the presence of A/MX, not the things to which they refer. On 12/13/13 9:53 AM, "Benny Pedersen" <[email protected]> wrote: >John Levine skrev den 2013-12-13 04:00: >>>> If example.net is a parked domain you can then protect it this way: >>>> _dmarc.example.net CNAME _dmarc.parked.example.com >>> >>> CNAME preserve DNSSEC ? >> >> Yes, of course it does. CNAME is a fundamental part of the DNS and >> always has been. > >i have seen CNAME used in MX records, its fundemental it works as >designed > >same problem some domains used in ADSP setup with is now depricated, >just still used in spamassassin in wild > >>> it does not work in ADSP >> >> I don't know what you mean by "does not work" here, but it doesn't >> matter because ADSP is dead, and DMARC does not use it. > >MX and ADSP must NOT be ised with CNAME > > >_______________________________________________ >dmarc-discuss mailing list >[email protected] >http://www.dmarc.org/mailman/listinfo/dmarc-discuss > >NOTE: Participating in this list means you agree to the DMARC Note Well >terms (http://www.dmarc.org/note_well.html) _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
