Opened 3 years ago

Last modified 2 years ago

#68 assigned enhancement

Do away with the PSL and Org Domain entirely; just walk the tree

Reported by: seth@… Owned by: todd.herr@…
Priority: major Milestone: Deliverable #3 (changes to DMARC base spec + DMARC Usage Guide
Component: dmarc-bis Version:
Severity: - Keywords: improve


When DMARC was first developed, there was concern about DNS load and needing to minimize DNS lookups. Operational expertise now shows that this is no longer cause for concern.

Short circuiting a tree walk has led to many issues, like a reliance on the PSL, complicated algorithms for Org Domain discovery, many types of domains (PSDs, per being unable to utilize DMARC even though they wish to, and larger organizations (such as universities and governments) that are comprised of sub-organizations that use subdomains having material problems getting everything authenticated.

All these issues disappear, and DMARC becomes a lot simpler conceptually, if DMARC simply walks the DNS hierarchy for the exact sending domain down to the TLD until it finds a DMARC record, and stops.

Change History (3)

comment:1 Changed 3 years ago by seth@…

  • Component changed from rfc7601bis to dmarc-bis
  • Owner draft-ietf-dmarc-rfc7601bis@… deleted
  • Status changed from new to assigned

comment:2 Changed 2 years ago by todd.herr@…

  • Owner set to todd.herr@…
  • Status changed from assigned to accepted

comment:3 Changed 2 years ago by todd.herr@…

  • Status changed from accepted to assigned
Note: See TracTickets for help on using tickets.