Re: [dmarc-ietf] Tree walk is screwed up

2022-01-20 Thread John Levine
It appears that Alessandro Vesely said: >On Wed 19/Jan/2022 19:38:15 +0100 John Levine wrote: >> What I always intended with the tree walk is that you walk up the tree and >> if you find >> a DMARC record that isn't a PSD, that's your org domain. To see if two >> names are in relaxed >>

Re: [dmarc-ietf] Tree walk is screwed up

2022-01-20 Thread Scott Kitterman
That sounds closer. I think Todd knows what he needs to change, so I'd prefer to see what goes into the document than to continue to tweak it. Scott K On Thursday, January 20, 2022 12:18:03 PM EST Douglas Foster wrote: > So if the first tree walk stops at a a PSD=y policy, then the match

Re: [dmarc-ietf] Tree walk is screwed up

2022-01-20 Thread Douglas Foster
So if the first tree walk stops at a a PSD=y policy, then the match string used for alignment is the organizational domain, one segment down from the PSD policy. Any SPF or DKIM domain must match or be a child of the organizational domain, so there is no secondary tree walk, Does that correct

Re: [dmarc-ietf] Tree walk is screwed up

2022-01-20 Thread Scott Kitterman
On Thursday, January 20, 2022 9:57:48 AM EST Douglas Foster wrote: ... > -- If a policy is found with PSD=y, the domain does not participate in > DMARC but may need to be tested for non-existence. If the policy also > specifies NP=reject, query the next-lower domain name for a resource > record.

Re: [dmarc-ietf] Tree walk is screwed up

2022-01-20 Thread Douglas Foster
I think this refinement of the concept will work better: 1) Check to see if the From domain participates in DMARC Starting with the FROM domain, perform the previously specified tree walk (start with the exact-match FROM domain, jumping to level 5 if necessary, then continuing to walk up the

Re: [dmarc-ietf] Tree walk is screwed up

2022-01-20 Thread Scott Kitterman
On January 19, 2022 6:47:56 PM UTC, Todd Herr wrote: >On Wed, Jan 19, 2022 at 1:38 PM John Levine wrote: > >> I took a look at sections 4.5 and 4.6 of the draft, the part that >> describes the tree walk >> and PSD, and unfortunately what it currently says is seriously wrong. >> Apologies for