Re: [dmarc-ietf] Organizational Alignment Options

2021-11-04 Thread Douglas Foster
I need some clarification. Threat risk --- You confirmed that the PSL has many potential uses, which confirmed my suspicions. But your conclusions are different. I have been working from the assumption that "PSL=TRUE" is equivalent to "DENY=(feature1, feature2, feature3, etc). I d

Re: [dmarc-ietf] a detour into public suffix publishing, was Organizational Alignment Options

2021-11-04 Thread John Levine
It appears that Tobias Herkula said: >-=-=-=-=-=- >As an entity you want to be on the PSL to declare an organizational boundary, >and usage is now for Cookies, Certificates, Domain Reputation and most likely >a longer list of >more obscure individual use cases. So most of the time a DNS-RR on a

Re: [dmarc-ietf] Organizational Alignment Options

2021-11-04 Thread Tim Wicinski
On Thu, Nov 4, 2021 at 6:54 AM Douglas Foster < dougfoster.emailstanda...@gmail.com> wrote: > It would be helpful to understand why people want to climb into the > publicsuffix.org list.My guess: An ISP, such as "ISP.TLD" allows > customers to create websites under their parent. They need

Re: [dmarc-ietf] Organizational Alignment Options

2021-11-04 Thread Tobias Herkula
As an entity you want to be on the PSL to declare an organizational boundary, and usage is now for Cookies, Certificates, Domain Reputation and most likely a longer list of more obscure individual use cases. So most of the time a DNS-RR on a DNS label that states “I’m a PSL” is the use-case that

Re: [dmarc-ietf] Organizational Alignment Options

2021-11-04 Thread Douglas Foster
It would be helpful to understand why people want to climb into the publicsuffix.org list.My guess: An ISP, such as "ISP.TLD" allows customers to create websites under their parent. They need to be able to indicate that website JohnSmith.ISP.TLD is independent of website IvanWatson.ISP.TLD,

Re: [dmarc-ietf] Organizational Alignment Options

2021-11-04 Thread Alessandro Vesely
On Thu 04/Nov/2021 04:09:37 +0100 Douglas Foster wrote: Ale asks: Hm... but PSDs don't seem to gain any extras by letting receivers know they're a PSD, do they? I think they do.   They get the benefits of name protection which DMARC previously afforded only to organizational domains and su