On 7/28/2020 2:11 PM, Autumn Tyr-Salvia wrote:
To Todd's point, I think the answer on which policy would be applied at least needs to be predictable. If one receiver chooses one policy and a different receiver chooses the other policy, that is going to make it significantly more complicated for complex organizations to implement a DMARC p=reject or even p=quarantine policy.
I'll suggest that this needs to be less a normative specification and more a best practices write-up. First, as I've noted, receivers will do whatever they want. Second is that I believe we don't yet know the better answers. (And so, really, I don't mean a BCP, but rather a 'considerations' doc.)
d/ -- Dave Crocker Brandenburg InternetWorking bbiw.net _______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc
