-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On Mon, 2019-06-03 at 16:10 -0700, Alan Hodgson via mailop wrote:
> You can sign with a sub-domain or parent domain as long as they share
> the same organizational domain.
My understanding was incorrect. Page 10 of RFC7489 says "In relaxed
mode,
On Mon, 2019-06-03 at 15:38 -0700, Carl Byington via mailop wrote:
> We can (manually) compensate for errors in dmarc records. For
> example,booking.com has a p=reject, but we see mail "From:
> .*@booking.com" dkimsigned by sg.booking.com. Strict dmarc would
> reject that. We enforce arequirement
