Subject: [Dbound] DMARC science fiction use case

From: Tim Draegen <[email-masked]>
Date: Thu, 13 Nov 2014 20:44:34 -1000

DMARC’s current use of the PSL is to determine the “Organizational Domain”.. for use when discovering DMARC policy records.  PSL works well enough for production environments in today’s world.

However, after hearing about cross-domain requirements of cookies and cross-domain security use cases in the browser, it strikes me that any functionality (policy authority?) that allows domains to be linked would be incredibly useful in the DMARC world, too.  DMARC’s requirement for Identifier Alignment between SPF-authenticated domain, DKIM d=domain, and a message’s From: domain could be relaxed to include domains that were somehow associated via a policy authority.

This capability would be *very* nice to have at hand.
=- Tim