Re: [dmarc-ietf] The description of psd=n

[Todd Herr <[e-mail]>]

On Tue, Mar 5, 2024 at 1:30 PM Scott Kitterman <[e-mail]> wrote:

>
>
> On March 5, 2024 2:47:47 PM UTC, Todd Herr <todd.herr=
> [e-mail]> wrote:
> >On Tue, Mar 5, 2024 at 6:12 AM Alessandro Vesely <[e-mail]> wrote:
> >
> >> Hi,
> >>
> >> Section 5.3, in the format description of psd:
> >>
> >>        n:  The DMARC policy record is published for a PSD, but it is the
> >>           Organizational Domain for itself and its subdomain.  There is
> >>           no need to put psd=n in a DMARC record, except in the very
> >>           unusual case of a parent PSD publishing a DMARC record without
> >>           the requisite psd=y tag.
> >>
> >> Perhaps a "not" is missing between "is" and "published"?  I'd just say
> >> the
> >> domain is not a PSD /and/ it is the Organizational Domain for itself and
> >> its subdomain.
> >>
> >>
> >You may be correct in your assertion here; I'll wait for others to weigh
> in.
> >
> >In the meantime, Issue 126 has been opened to track this.
> >
>
> I think it's missing a not, but is overwise fine.
>
>
John Levine commented directly on issue 126
<https://github.com/ietf-wg-dmarc/draft-ietf-dmarc-dmarcbis/issues/126>,
indicating that he believes the text should read (emphasis added by me):

       n:  The DMARC policy record is published for a PSD, but it is NOT the
          Organizational Domain for itself and its subdomain.  There is
          no need to put psd=n in a DMARC record, except in the very
          unusual case of a parent PSD publishing a DMARC record without
          the requisite psd=y tag.

I think this is the correct place to put the 'not', as it's consistent with
the second sentence here, as well as this text from the following sections:

4.8 Organizational Domain Discovery - "If a valid DMARC record contains the
psd= tag set to 'n' (psd=n), this is the Organizational Domain, and the
selection process is complete."

11.8 Determination of Organizational Domain for Relaxed Alignment -  "If a
PSD domain publishes a DMARC record without the appropriate psd=y tag,
organizational domain owners can add psd=n to their organizational domain's
DMARC record so that the PSD record will not be incorrectly evaluated to be
the organizational domain."


-- 

*Todd Herr * | Technical Director, Standards & Ecosystem
*e:* [e-mail]
*p:* 703-220-4153
*m:* 703.220.4153

This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.