On Wed 13/Mar/2024 11:23:43 +0100 Douglas Foster wrote:
The reality is that the Tree Walk is an inefficient and unreliable way of obtaining an answer, particularly because of the risk of DNS timeouts. As a result, the Tree Walk should be avoided whenever possible. In fact, the secondary tree walks for SPF and DKIM can frequently be avoided: - When strict alignment is required. - When the SPF/DKIM domain is not verified. - When the SPF/DKIM domain matches the From domain. - When the SPF/DKIM domain is a parent of the From domain.
However, if the parent domain has psd=y it's not aligned.
- When a string comparison shows that the SPF/DKIM domain is not a child of the organizational domain
You mean if they have different TLDs? Best Ale -- _______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc