On 5/15/2020 2:26 PM, Seth Blank wrote:
https://trac.ietf.org/trac/dmarc/ticket/63
A published DMARC record that consists solely of "v=DMARC1; p=none" is
syntactically valid, but is semantically equivalent to having no
record at all.
From an ecosystem perspective, especially in Europe, data has been
shared showing an increasing number of domains putting in bare p=none
records, and then claiming that they are implementing DMARC and have
some layer of protection against spoofing of their domain.
Explicitly making this case invalid would remove confusion from the
ecosystem, and allow any checker that is up to spec to properly flag a
bare p=none record as being the same as not having a record at all.
Should we make it invalid to have p=none without a reporting address?
No. Reporting can not be mandated.
--
HLS
_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc
