On Sun, May 23, 2021 at 12:25 PM Douglas Foster < dougfoster.emailstanda...@gmail.com> wrote:
> [...] > 145 of 169 (86%) of non-verified domains had MX or A records, > Of the 24 without MX or A records, 23 were spam and 1 was legitimate > For 20 of the 24 , SPF on the From address returned NXDomain and were > obvious spam without checking NS > All of the remaining 4 domains had NS records > I believe this means that for 2.4% of the non-verified domains, or 0.65% of the total domains, the proposed NS check yielded useful signal beyond the standard checking of MX/A/AAAA. One surprise for me: > NS lookup on email3.reachmd.com returns NXDomain, but NS lookup on > sg.email3.reachmd.com returns NS data. > I thought that the existence of a subdomain would be sufficient for a > domain to return NS data. > Right, it isn't. Summary: > - MX/A produced 11 false positives > Is that 11 false positive messages, or 11 false positive unique domains? If the former, we're talking about around 0.3%. If the latter, we're talking about 1.8%. So based on the data you collected, what conclusion are you proposing? -MSK
_______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc
