On Thu, Apr 03, 2025 at 11:06:10AM +0100, Simplelists - Andy Beverley via
mailop wrote:
> > The name _dmarc.xxx.com.dmarc.has.pphosted.com does not exist at all
> > right now. Are you sure you are looking at the correct problem?
> Sorry, I should have said that xxx should be replaced by the domain in
> question. I didn't want to write the specific customer's name, for client
> confidentiality reasons.
That's why example.{com,net,org}[RFC2606] exists. No need to guess
then. xxx.com on the other side is a pretty valid domain.
> Here's a real example, using an organization that is listed publicly as a
> Proofpoint customer:
> IN CNAME _dmarc.gcu.edu.dmarc.has.pphosted.com.
This looks pretty broken to begin with, but unrelated to the problem at
question:
https://dnsviz.net/d/_dmarc.gcu.edu.dmarc.has.pphosted.com/dnssec/
Which is weird, as this server behaves like a PowerDNS in online signing
mode (all signatures are valid from thursday to thursday three weeks
later and every server returns a different one).
Bastian
--
You're dead, Jim.
-- McCoy, "The Tholian Web", stardate unknown
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
