On 6/13/20 1:13 PM, John Levine wrote: > In particular, there is no chance whatsoever that any DMARC policy > will become mandatory, because the IETF doesn't do mandatory.
Alas, others do, apparently because they see that DMARC has an RFC number (even though it's informational). For example, in https://cyber.dhs.gov/bod/18-01/ : "All agencies are required to...enhance email security by...Within one year after issuance of this directive, setting a DMARC policy of “reject” for all second-level domains and mail-sending hosts." _______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc