-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Mon, 2019-06-03 at 16:10 -0700, Alan Hodgson via mailop wrote: > You can sign with a sub-domain or parent domain as long as they share > the same organizational domain.
My understanding was incorrect. Page 10 of RFC7489 says "In relaxed mode, the Organizational Domains of both ... must be equal", so from=a...@sub.sub.example.com -can be signed by example.com, or any subdomain thereof including joe.example.com. from=a...@example.com can also be signed by example.com, or any subdomain thereof including joe.example.com. Thank you for the correction. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAlz2ioUACgkQL6j7milTFsG8YgCfS5Ye4wkGSO5aqG/14YfPEN+Z OXwAn3rruPZxXdkpa0aLW/JLPlXbTucV =a9gC -----END PGP SIGNATURE----- _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
