Re: [dmarc-ietf] DMARCbis WGLC Significant(ish) Issue - Section 7.6

[Seth Blank <[e-mail]>]

This statement is patently false, though, and the guidance goes well beyond
operational reality. I think the statement should be struck in its entirety.

All the major free mail providers are moving to have DMARC policies on
their domains. Yahoo has it, 1und1 has it, Gmail has committed to do it.
That's 2.5bn+ inboxes protected by DMARC. Why would we have text says MUST
or SHOULD NOT against a practice that's protecting inboxes worldwide and is
picking up steam across them all due to the very real security benefit of
the document this guidance is in...?

On Thu, Feb 29, 2024 at 1:55 PM Todd Herr <todd.herr=
[e-mail]> wrote:

> Colleagues,
>
> I've been reading DMARCbic rev -30 today with a plan to collect the first
> set of minor edits and I came across a sentence that I believe goes beyond
> minor, so wanted to get a sanity check.
>
> Section 7.6, Domain Owner Actions, ends with the following sentence:
>
> In particular, this document makes explicit that domains for
> general-purpose email MUST NOT deploy a DMARC policy of p=reject.
>
>
> I don't believe this to be true, however. Rather, Section 8.6,
> Interoperability Considerations, says SHOULD NOT on the topic (e.g., "It
> is therefore critical that domains that host users who might post messages
> to mailing lists SHOULD NOT publish p=reject")
>
> Section 7.6 therefore should be updated to read "domains for
> general-purpose email SHOULD NOT deploy a DMARC policy of p=reject", yes?
>
> --
>
> *Todd Herr * | Technical Director, Standards & Ecosystem
> *e:* [e-mail]
> *p:* 703-220-4153
> *m:* 703.220.4153
>
> This email and all data transmitted with it contains confidential and/or
> proprietary information intended solely for the use of individual(s)
> authorized to receive it. If you are not an intended and authorized
> recipient you are hereby notified of any use, disclosure, copying or
> distribution of the information included in this transmission is prohibited
> and may be unlawful. Please immediately notify the sender by replying to
> this email and then delete it from your system.
> _______________________________________________
> dmarc mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/dmarc
>


-- 

*Seth Blank * | Chief Technology Officer
*e:* [e-mail]
*p:*

This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.