The point is that "zone cut" and "organizational domain" aren't the
same thing, and what DMARC cares about is the latter.

But here we're just talking about our own understanding of the
terminology.  Ale, if you use "organizational domain" instead of "zone
cut", do you still think there's an issue that isn't correctly covered
by the current algorithm?

Barry

On Sun, Jul 31, 2022 at 5:29 AM Alessandro Vesely <ves...@tana.it> wrote:
>
> On Sat 30/Jul/2022 21:16:40 +0200 John Levine wrote:
> >>> Sorry, but this is just wrong.  DMARC and the tree walk have
> >>> nothing, and I emphasize nothing, to do with zone cuts.
> >>
> >> I thought a zone cut marked the boundary where an organization
> >> delegates control to another one.
> >
> > No, it's the place where one set of name servers delegates part of
> > their DNS tree to another set.
>
>
> Isn't that the same thing?
>
>
> > Sometimes the name servers are in different organizations, sometimes
> > they are not.  I have also seen situations where a company hosts DNS
> > for several of its customers all in the same zone, with no zone cut
> > between them.
>
>
> I understand that it often happens to find servers of Dyndns, Zoneedit
> and similar companies.  However, not setting a zone cut may make
> authorizations difficult, unless those customers use all the same
> predefined set of records.  What kind of Internet activity can they do
> that way?
>
>
> >>  In many cases, that would be the org domain, no?
> >
> > Sometimes, but you cannot tell, because DMARC and the tree walk have
> > nothing to do with zone cuts.
>
>
> Of course one cannot tell.  Wouldn't you agree that if it were
> possible to tell zone cuts then we wouldn't need the tree walk, and
> the PSL wouldn't have been developed as well?
>
>
> Best
> Ale
> --
>
>
>
>
>
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc

_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to