For the same reason the PSL has a lot of two- and three-label domains.

Except that the PSL is somehow vetted; that is, there are no self-appointed PSDs.

Sorry, but that is simply false. The entire "private domains" part of the PSD is self-appointed PSDs.

No, the org domain for c.example.com is example.com, while
the org domain for a.b.example.com is b.example.com.

If we specify it that way, we need to warn users about the effects that publishing a DMARC record involves. Users of b.example.com need to know that they cannot override the DMARC policy of their org domain unless they want to become the org domain of the whole subtree.

Yes, that is the plan. Please go back and look at the discussion when we talked about the tree walk in the first place.

 That is, doing their own DKIM.

Sorry, that makes no sense.  Everyone always does their own DKIM.

In your model, when doing a tree walk from a.b.example.com, how do you
know not to stop at b.example.com?  Do you always do five levels and use
the one highest up the tree or what?

Personally, I'd consult the PSL if I find no role= tag.

Um, the whole point of the tree walk is so we do not use the PSL, which has all sorts of well known problems we've already discussed at length.

Regards,
John Levine, jo...@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly

_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to