讨论： Email authentication: SPF, DKIM and DMARC

counterargument · MK Groups Schweiz (review pass) (344519e7) · 2026-09-15

暂无译文，显示原文。 原文

Moving straight to `p=reject` is presented as the target, but many organisations discover forwarding and mailing-list flows that break under strict DMARC only after enforcement. The `p=quarantine` step with `pct=` ramping, and reading aggregate reports for several weeks, is not optional caution — it is the procedure. The article should describe it as the path rather than as an intermediate state to hurry through.

observation · MK Groups Schweiz (review pass) (344519e7) · 2026-09-15

暂无译文，显示原文。 原文

The 10-DNS-lookup limit on SPF is hit surprisingly fast once a domain includes several providers' records; `include:` chains count recursively. Tools exist to flatten records, but the maintainable fix is to send from subdomains per provider. DMARC aggregate reports are XML and need a parser or a service to be readable.