-
Notifications
You must be signed in to change notification settings - Fork 4
/
draft-ietf-dmarc-psd-05-from-4.diff.html
608 lines (607 loc) · 128 KB
/
draft-ietf-dmarc-psd-05-from-4.diff.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<!-- Generated by rfcdiff 1.41: rfcdiff -->
<!-- <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional" > -->
<!-- System: Linux l5580 4.19.0-5-amd64 #1 SMP Debian 4.19.37-3 (2019-05-15) x86_64 GNU/Linux -->
<!-- Using awk: /usr/bin/gawk: GNU Awk 4.2.1, API: 2.0 (GNU MPFR 4.0.2, GNU MP 6.1.2) -->
<!-- Using diff: /usr/bin/diff: diff (GNU diffutils) 3.7 -->
<!-- Using wdiff: /usr/bin/wdiff: wdiff (GNU wdiff) 1.2.2 -->
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<meta http-equiv="Content-Style-Type" content="text/css" />
<title>Diff: draft-ietf-dmarc-psd-04.txt - draft-ietf-dmarc-psd-05.txt</title>
<style type="text/css">
body { margin: 0.4ex; margin-right: auto; }
tr { }
td { white-space: pre; font-family: monospace; vertical-align: top; font-size: 0.86em;}
th { font-size: 0.86em; }
.small { font-size: 0.6em; font-style: italic; font-family: Verdana, Helvetica, sans-serif; }
.left { background-color: #EEE; }
.right { background-color: #FFF; }
.diff { background-color: #CCF; }
.lblock { background-color: #BFB; }
.rblock { background-color: #FF8; }
.insert { background-color: #8FF; }
.delete { background-color: #ACF; }
.void { background-color: #FFB; }
.cont { background-color: #EEE; }
.linebr { background-color: #AAA; }
.lineno { color: red; background-color: #FFF; font-size: 0.7em; text-align: right; padding: 0 2px; }
.elipsis{ background-color: #AAA; }
.left .cont { background-color: #DDD; }
.right .cont { background-color: #EEE; }
.lblock .cont { background-color: #9D9; }
.rblock .cont { background-color: #DD6; }
.insert .cont { background-color: #0DD; }
.delete .cont { background-color: #8AD; }
.stats, .stats td, .stats th { background-color: #EEE; padding: 2px 0; }
</style>
</head>
<body >
<table border="0" cellpadding="0" cellspacing="0">
<tr bgcolor="orange"><th></th><th> draft-ietf-dmarc-psd-04.txt </th><th> </th><th> draft-ietf-dmarc-psd-05.txt </th><th></th></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">Network Working Group S. Kitterman</td><td> </td><td class="right">Network Working Group S. Kitterman</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">Internet-Draft fTLD Registry Services</td><td> </td><td class="right">Internet-Draft fTLD Registry Services</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0001" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock">Intended status: Experimental <span class="delete">May</span> 27, 2019</td><td> </td><td class="rblock">Intended status: Experimental <span class="insert">July</span> 27, 2019</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock">Expires: <span class="delete">November</span> 28, <span class="delete">2019</span></td><td> </td><td class="rblock">Expires: <span class="insert">January</span> 28, <span class="insert">2020</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">DMARC (Domain-based Message Authentication, Reporting, and Conformance)</td><td> </td><td class="right">DMARC (Domain-based Message Authentication, Reporting, and Conformance)</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Extension For PSDs (Public Suffix Domains)</td><td> </td><td class="right"> Extension For PSDs (Public Suffix Domains)</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0002" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> draft-ietf-dmarc-psd-0<span class="delete">4</span></td><td> </td><td class="rblock"> draft-ietf-dmarc-psd-0<span class="insert">5</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">Abstract</td><td> </td><td class="right">Abstract</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> DMARC (Domain-based Message Authentication, Reporting, and</td><td> </td><td class="right"> DMARC (Domain-based Message Authentication, Reporting, and</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Conformance) is a scalable mechanism by which a mail-originating</td><td> </td><td class="right"> Conformance) is a scalable mechanism by which a mail-originating</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> organization can express domain-level policies and preferences for</td><td> </td><td class="right"> organization can express domain-level policies and preferences for</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> message validation, disposition, and reporting, that a mail-receiving</td><td> </td><td class="right"> message validation, disposition, and reporting, that a mail-receiving</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> organization can use to improve mail handling. DMARC policies can be</td><td> </td><td class="right"> organization can use to improve mail handling. DMARC policies can be</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0003" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> applied <span class="delete">at the</span> individual <span class="delete">domain level</span> or <span class="delete">for a set of</span> domains <span class="delete">at the</span></td><td> </td><td class="rblock"> applied <span class="insert">to</span> individual <span class="insert">domains</span> or <span class="insert">to all</span> domains <span class="insert">within an</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> organizational level.</span> The design of DMARC precludes grouping</td><td> </td><td class="rblock"><span class="insert"> organization.</span> The design of DMARC precludes grouping policies for</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> policies for <span class="delete">a set of</span> domains above the organizational level, such as</td><td> </td><td class="rblock"> domains <span class="insert">based on policy published</span> above the organizational level,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> TLDs (Top Level Domains). <span class="delete">These types</span> of <span class="delete">domains (which are</span> not <span class="delete">all</span></td><td> </td><td class="rblock"> such as TLDs (Top Level Domains). <span class="insert">Domains at this higher level</span> of</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> at the top <span class="delete">level</span> of the DNS tree) can be collectively referred to as</td><td> </td><td class="rblock"> <span class="insert">the DNS tree (but</span> not <span class="insert">necessarily</span> at the top of the DNS tree) can be</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> Public Suffix Domains (PSDs). <span class="delete">For the subset of PSDs that require</span></td><td> </td><td class="rblock"> collectively referred to as Public Suffix Domains (PSDs). <span class="insert">This</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> DMARC usage, this memo</span> describes an extension to DMARC to enable</td><td> </td><td class="rblock"><span class="insert"> document</span> describes an extension to DMARC to enable DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> DMARC functionality <span class="delete">for such domains.</span></td><td> </td><td class="rblock"> functionality <span class="insert">PSDs.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">Status of This Memo</td><td> </td><td class="right">Status of This Memo</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> This Internet-Draft is submitted in full conformance with the</td><td> </td><td class="right"> This Internet-Draft is submitted in full conformance with the</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> provisions of BCP 78 and BCP 79.</td><td> </td><td class="right"> provisions of BCP 78 and BCP 79.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Internet-Drafts are working documents of the Internet Engineering</td><td> </td><td class="right"> Internet-Drafts are working documents of the Internet Engineering</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Task Force (IETF). Note that other groups may also distribute</td><td> </td><td class="right"> Task Force (IETF). Note that other groups may also distribute</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> working documents as Internet-Drafts. The list of current Internet-</td><td> </td><td class="right"> working documents as Internet-Drafts. The list of current Internet-</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Drafts is at https://datatracker.ietf.org/drafts/current/.</td><td> </td><td class="right"> Drafts is at https://datatracker.ietf.org/drafts/current/.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Internet-Drafts are draft documents valid for a maximum of six months</td><td> </td><td class="right"> Internet-Drafts are draft documents valid for a maximum of six months</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> and may be updated, replaced, or obsoleted by other documents at any</td><td> </td><td class="right"> and may be updated, replaced, or obsoleted by other documents at any</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> time. It is inappropriate to use Internet-Drafts as reference</td><td> </td><td class="right"> time. It is inappropriate to use Internet-Drafts as reference</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> material or to cite them other than as "work in progress."</td><td> </td><td class="right"> material or to cite them other than as "work in progress."</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0004" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> This Internet-Draft will expire on <span class="delete">November 28, 2019</span>.</td><td> </td><td class="rblock"> This Internet-Draft will expire on <span class="insert">January 28, 2020</span>.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">Copyright Notice</td><td> </td><td class="right">Copyright Notice</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Copyright (c) 2019 IETF Trust and the persons identified as the</td><td> </td><td class="right"> Copyright (c) 2019 IETF Trust and the persons identified as the</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> document authors. All rights reserved.</td><td> </td><td class="right"> document authors. All rights reserved.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> This document is subject to BCP 78 and the IETF Trust's Legal</td><td> </td><td class="right"> This document is subject to BCP 78 and the IETF Trust's Legal</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Provisions Relating to IETF Documents</td><td> </td><td class="right"> Provisions Relating to IETF Documents</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> (https://trustee.ietf.org/license-info) in effect on the date of</td><td> </td><td class="right"> (https://trustee.ietf.org/license-info) in effect on the date of</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> publication of this document. Please review these documents</td><td> </td><td class="right"> publication of this document. Please review these documents</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> carefully, as they describe your rights and restrictions with respect</td><td> </td><td class="right"> carefully, as they describe your rights and restrictions with respect</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> to this document. Code Components extracted from this document must</td><td> </td><td class="right"> to this document. Code Components extracted from this document must</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> include Simplified BSD License text as described in Section 4.e of</td><td> </td><td class="right"> include Simplified BSD License text as described in Section 4.e of</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> the Trust Legal Provisions and are provided without warranty as</td><td> </td><td class="right"> the Trust Legal Provisions and are provided without warranty as</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> described in the Simplified BSD License.</td><td> </td><td class="right"> described in the Simplified BSD License.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">Table of Contents</td><td> </td><td class="right">Table of Contents</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0005" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . <span class="delete">2</span></td><td> </td><td class="rblock"> 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . <span class="insert">3</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 2. Terminology and Definitions . . . . . . . . . . . . . . . . . <span class="delete">4</span></td><td> </td><td class="rblock"> 2. Terminology and Definitions . . . . . . . . . . . . . . . . . <span class="insert">5</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 2.1. Conventions Used in This Document . . . . . . . . . . . . <span class="delete">4</span></td><td> </td><td class="rblock"> 2.1. Conventions Used in This Document . . . . . . . . . . . . <span class="insert">5</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 2.2. Public Suffix Domain (PSD) . . . . . . . . . . . . . . . <span class="delete">4</span></td><td> </td><td class="rblock"> 2.2. Public Suffix Domain (PSD) . . . . . . . . . . . . . . . <span class="insert">5</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> 2.3. Longest PSD . . . . . . . . . . . . . . . . . . . . . . . 5</td><td> </td><td class="right"> 2.3. Longest PSD . . . . . . . . . . . . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> 2.4. Public Suffix Operator (PSO) . . . . . . . . . . . . . . 5</td><td> </td><td class="right"> 2.4. Public Suffix Operator (PSO) . . . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> 2.5. PSO Controlled Domain Names . . . . . . . . . . . . . . . 5</td><td> </td><td class="right"> 2.5. PSO Controlled Domain Names . . . . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> 2.6. Non-existent Domains . . . . . . . . . . . . . . . . . . 5</td><td> </td><td class="right"> 2.6. Non-existent Domains . . . . . . . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0006" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 3. PSD DMARC Updates to DMARC Requirements . . . . . . . . . . . <span class="delete">5</span></td><td> </td><td class="rblock"> 3. PSD DMARC Updates to DMARC Requirements . . . . . . . . . . . <span class="insert">6</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 3.1. General Updates . . . . . . . . . . . . . . . . . . . . . <span class="delete">5</span></td><td> </td><td class="rblock"> 3.1. General Updates . . . . . . . . . . . . . . . . . . . . . <span class="insert">6</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 3.2. Section 6.1 DMARC Policy Record . . . . . . . . . . . . . <span class="delete">5</span></td><td> </td><td class="rblock"> 3.2. Section 6.1 DMARC Policy Record . . . . . . . . . . . . . <span class="insert">6</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 3.3. Section 6.5. Domain Owner Actions . . . . . . . . . . . <span class="delete">5</span></td><td> </td><td class="rblock"> 3.3. Section <span class="insert">6.3 General Record Format . . . . . . . . . . . . 6</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> 3.4.</span> Section 6.6.3. Policy Discovery . . . . . . . . . . . . <span class="delete">6</span></td><td> </td><td class="rblock"><span class="insert"> 3.4. Section</span> 6.5. Domain Owner Actions . . . . . . . . . . . <span class="insert">7</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> 3.5.</span> Section 7. DMARC Feedback . . . . . . . . . . . . . . . <span class="delete">6</span></td><td> </td><td class="rblock"><span class="insert"> 3.5.</span> Section 6.6.3. Policy Discovery . . . . . . . . . . . . <span class="insert">7</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 4. Privacy Considerations . . . . . . . . . . . . . . . . . . . <span class="delete">6</span></td><td> </td><td class="rblock"><span class="insert"> 3.6.</span> Section 7. DMARC Feedback . . . . . . . . . . . . . . . <span class="insert">7</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 4.1. Feedback leakage . . . . . . . . . . . . . . . . . . . . <span class="delete">6</span></td><td> </td><td class="rblock"> 4. Privacy Considerations . . . . . . . . . . . . . . . . . . . <span class="insert">7</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 5. Security Considerations . . . . . . . . . . . . . . . . . . . <span class="delete">7</span></td><td> </td><td class="rblock"> 4.1. Feedback leakage . . . . . . . . . . . . . . . . . . . . <span class="insert">8</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . <span class="delete">8</span></td><td> </td><td class="rblock"> 5. Security Considerations . . . . . . . . . . . . . . . . . . . <span class="insert">9</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 7. References . . . . . . . . . . . . . . . . . . . . . . . . . <span class="delete">8</span></td><td> </td><td class="rblock"> 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . <span class="insert">9</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 7.1. Normative References . . . . . . . . . . . . . . . . . . <span class="delete">8</span></td><td> </td><td class="rblock"><span class="insert"> 6.1. Subdomain Policy Tag . . . . . . . . . . . . . . . . . . 9</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> 7.2. Informative References . . . . . . . . . . . . . . . . . <span class="delete">8</span></td><td> </td><td class="rblock"> 7. References . . . . . . . . . . . . . . . . . . . . . . . . . <span class="insert">9</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> Appendix A. The Experiment . . . . . . . . . . . . . . . . . . . <span class="delete">9</span></td><td> </td><td class="rblock"> 7.1. Normative References . . . . . . . . . . . . . . . . . . <span class="insert">9</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> Appendix B. DMARC PSD Registry Examples . . . . . . . . . . . . <span class="delete">10</span></td><td> </td><td class="rblock"> 7.2. Informative References . . . . . . . . . . . . . . . . . <span class="insert">10</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> B.1. DMARC PSD DNS Query Service . . . . . . . . . . . . . . . <span class="delete">10</span></td><td> </td><td class="rblock"> Appendix A. The Experiment . . . . . . . . . . . . . . . . . . . <span class="insert">11</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> B.2. DMARC Public Suffix Domain (PSD) Registry . . . . . . . . <span class="delete">10</span></td><td> </td><td class="rblock"><span class="insert"> A.1. PSD DMARC Privacy Concern Mitigation . . . . . . . . . . 11</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> Appendix C. Implementation . . . . . . . . . . . . . . . . . . . <span class="delete">11</span></td><td> </td><td class="rblock"><span class="insert"> A.2. Non-Existent Subdomain Policy . . . . . . . . . . . . . . 12</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> C.1. Authheaders Module . . . . . . . . . . . . . . . . . . . <span class="delete">11</span></td><td> </td><td class="rblock"> Appendix B. DMARC PSD Registry Examples . . . . . . . . . . . . <span class="insert">12</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . . <span class="delete">11</span></td><td> </td><td class="rblock"> B.1. DMARC PSD DNS Query Service . . . . . . . . . . . . . . . <span class="insert">12</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> Author's Address . . . . . . . . . . . . . . . . . . . . . . . . <span class="delete">11</span></td><td> </td><td class="rblock"> B.2. DMARC Public Suffix Domain (PSD) Registry . . . . . . . . <span class="insert">12</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> Appendix C. Implementation . . . . . . . . . . . . . . . . . . . <span class="insert">13</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> C.1. Authheaders Module . . . . . . . . . . . . . . . . . . . <span class="insert">13</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . . <span class="insert">13</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> Author's Address . . . . . . . . . . . . . . . . . . . . . . . . <span class="insert">13</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">1. Introduction</td><td> </td><td class="right">1. Introduction</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> DMARC [RFC7489] provides a mechanism for publishing organizational</td><td> </td><td class="right"> DMARC [RFC7489] provides a mechanism for publishing organizational</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0007" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> policy information to email receivers. DMARC <span class="delete">[RFC7489]</span> allows policy</td><td> </td><td class="rblock"> policy information to email receivers. DMARC allows policy to be</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> to be specified for both individual domains and <span class="delete">sets of</span> domains</td><td> </td><td class="rblock"> specified for both individual domains and <span class="insert">for organizational</span> domains</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> within a single organization. For domains <span class="delete">above the organizational</span></td><td> </td><td class="rblock"> <span class="insert">and their sub-domains</span> within a single organization. For <span class="insert">TLDs and</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> level <span class="delete">in the DNS tree,</span> policy can only be published for the exact</td><td> </td><td class="rblock"> domains <span class="insert">that exist between TLDs and organization</span> level <span class="insert">domains,</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> domain. <span class="delete">There is no</span> method available <span class="delete">to</span> such domains to express</td><td> </td><td class="rblock"> policy can only be published for the exact domain. <span class="insert">No</span> method <span class="insert">is</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">lower level</span> policy or receive feedback reporting for <span class="delete">sets of domains.</span></td><td> </td><td class="rblock"> available <span class="insert">for</span> such domains to express policy or receive feedback</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> This <span class="delete">prevents policy application to</span> non-existent domains and</td><td> </td><td class="rblock"> reporting for <span class="insert">sub-domains.</span> This <span class="insert">missing method allows for the abuse</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> identification of domain abuse in <span class="delete">email, which can be important for</span></td><td> </td><td class="rblock"><span class="insert"> of</span> non-existent <span class="insert">organizational-level</span> domains and <span class="insert">prevents</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> brand and consumer protection.</span></td><td> </td><td class="rblock"> identification of domain abuse in <span class="insert">email.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> As an example, imagine a country code TLD (ccTLD) which has public</td><td> </td><td class="right"> As an example, imagine a country code TLD (ccTLD) which has public</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> subdomains for government and commercial use (.gov.example and</td><td> </td><td class="right"> subdomains for government and commercial use (.gov.example and</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> .com.example). Within the .gov.example public suffix, use of DMARC</td><td> </td><td class="right"> .com.example). Within the .gov.example public suffix, use of DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0008" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">[RFC7489]</span> has been mandated and .gov.example has published its own</td><td> </td><td class="rblock"> has been mandated and .gov.example has published its own DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> DMARC <span class="delete">[RFC7489]</span> record:</td><td> </td><td class="rblock"> record:</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0009" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> "v=DMARC1;<span class="delete">p=reject;</span>rua=mailto:[email protected]"</td><td> </td><td class="rblock"> "v=DMARC1;<span class="insert"> p=reject; </span>rua=mailto:[email protected]"</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> at</td><td> </td><td class="right"> at</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> _dmarc.gov.example.</td><td> </td><td class="right"> _dmarc.gov.example.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0010" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> This <span class="delete">would provide</span> policy and <span class="delete">feedback</span> for mail sent from</td><td> </td><td class="rblock"> This <span class="insert">DMARC record provides</span> policy and <span class="insert">a reporting destination</span> for</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">@gov.example, but not @tax.gov.example and there is no way</span> to <span class="delete">publish</span></td><td> </td><td class="rblock"> mail sent from <span class="insert">@gov.example. However, due</span> to <span class="insert">DMARC's current method</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> an organizational level policy that would do so. While, in theory,</span></td><td> </td><td class="rblock"> of <span class="insert">discovering and applying policy at</span> the <span class="insert">organizational</span> domain</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> receivers could reject mail from non-existent domains, not all</span></td><td> </td><td class="rblock"> <span class="insert">level, the non-existent organizational domain of @tax.gov.example</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> receivers do so. Non-existence</span> of the <span class="delete">sending</span> domain <span class="delete">can be a factor</span></td><td> </td><td class="rblock"><span class="insert"> does</span> not <span class="insert">and cannot fall under a DMARC policy.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> in a mail delivery decision, but is</span> not <span class="delete">generally treated as</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> definitive on its own.</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0011" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> This <span class="delete">memo</span> provides a simple extension to DMARC [RFC7489] to allow</td><td> </td><td class="rblock"> This <span class="insert">document</span> provides a simple extension to DMARC [RFC7489] to allow</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> operators of Public Suffix Domains (PSDs) to express policy <span class="delete">for</span></td><td> </td><td class="rblock"> operators of Public Suffix Domains (PSDs) to express policy <span class="insert">at the</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> groups</span> of <span class="delete">subdomains,</span> extends the DMARC <span class="delete">[RFC7489]</span> policy query</td><td> </td><td class="rblock"><span class="insert"> level</span> of <span class="insert">the PSD that covers all organizational domains that do not</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> explicitly publish DMARC records,</span> extends the DMARC policy query</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> functionality to detect and process such a policy, describes receiver</td><td> </td><td class="right"> functionality to detect and process such a policy, describes receiver</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> feedback for such policies, and provides controls to mitigate</td><td> </td><td class="right"> feedback for such policies, and provides controls to mitigate</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> potential privacy considerations associated with this extension.</td><td> </td><td class="right"> potential privacy considerations associated with this extension.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0012" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> As an additional benefit, the PSD DMARC extension <span class="delete">will clarify</span></td><td> </td><td class="rblock"> <span class="insert">This document also provides a new DMARC [RFC7489] tag to indicate</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> existing requirements. Based on the requirements of DMARC [RFC7489],</td><td> </td><td class="rblock"><span class="insert"> requested handling policy for non-existent subdommains. This is</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> DMARC should function above the organizational level for exact domain</td><td> </td><td class="rblock"><span class="insert"> provided specifically to support phased deployment of PSD DMARC, but</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> is expected to be useful more generally. Undesired rejection risks</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> for mail purporting to be from domains that do not exist are</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> substantially lower than for those that do, so the operational risk</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> of requesting harsh policy treatment (e.g. reject) is lower.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> As an additional benefit, the PSD DMARC extension <span class="insert">clarifies</span> existing</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> requirements. Based on the requirements of DMARC [RFC7489], DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> should function above the organizational level for exact domain</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> matches (i.e. if a DMARC record were published for 'example', then</td><td> </td><td class="right"> matches (i.e. if a DMARC record were published for 'example', then</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> mail from example@example should be subject to DMARC processing).</td><td> </td><td class="right"> mail from example@example should be subject to DMARC processing).</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Testing had revealed that this is not consistently applied in</td><td> </td><td class="right"> Testing had revealed that this is not consistently applied in</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0013" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> different implementations. <span class="delete">PSD DMARC will help clarify that DMARC is</span></td><td> </td><td class="rblock"> different implementations.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> not limited to organizational domains and their sub-domains.</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> There are two types of Public Suffix Operators (PSOs) for which this</td><td> </td><td class="right"> There are two types of Public Suffix Operators (PSOs) for which this</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> extension would be useful and appropriate:</td><td> </td><td class="right"> extension would be useful and appropriate:</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> o Branded PSDs (e.g., ".google"): These domains are effectively</td><td> </td><td class="right"> o Branded PSDs (e.g., ".google"): These domains are effectively</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Organizational Domains as discussed in DMARC [RFC7489]. They</td><td> </td><td class="right"> Organizational Domains as discussed in DMARC [RFC7489]. They</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> control all subdomains of the tree. These are effectively private</td><td> </td><td class="right"> control all subdomains of the tree. These are effectively private</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> domains, but listed in the Public Suffix List. They are treated</td><td> </td><td class="right"> domains, but listed in the Public Suffix List. They are treated</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0014" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> as Public for DMARC <span class="delete">[RFC7489]</span> purposes. They require the same</td><td> </td><td class="rblock"> as Public for DMARC purposes. They require the same protections</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> protections as DMARC <span class="delete">[RFC7489]</span> Organizational Domains, but are</td><td> </td><td class="rblock"> as DMARC Organizational Domains, but are currently excluded.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> currently excluded.</td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> o Multi-organization PSDs that require DMARC usage (e.g., ".bank"):</td><td> </td><td class="right"> o Multi-organization PSDs that require DMARC usage (e.g., ".bank"):</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Because existing Organizational Domains using this PSD have their</td><td> </td><td class="right"> Because existing Organizational Domains using this PSD have their</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> own DMARC policy, the applicability of this extension is for non-</td><td> </td><td class="right"> own DMARC policy, the applicability of this extension is for non-</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> existent domains. The extension allows the brand protection</td><td> </td><td class="right"> existent domains. The extension allows the brand protection</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0015" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> benefits of DMARC <span class="delete">[RFC7489]</span> to extend to the entire PSD, including</td><td> </td><td class="rblock"> benefits of DMARC to extend to the entire PSD, including cousin</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> cousin domains of registered organizations.</td><td> </td><td class="rblock"> domains of registered organizations.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> <span class="insert">As an example, take the ".gov.example" described above and add that</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> for this entity emails about tax returns are sent from</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> tax.gov.example. It would not be surprising if fraudulent emails</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> were sent purporting to be from taxes.gov.example (taxes is a cousin</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> of tax - different enough to evade DMARC protection, but similar</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> enough to potentially confuse users). As defined in DMARC [RFC7489],</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> a DMARC record could be published for tax.gov.example, but there is</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> no general solution to publishing a DMARC policy to defend against</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> abuse of non-existent cousins such as taxes.gov.example. While an</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> explicit record could be published for this one domain, the universe</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> of possible cousins is such that this approach does not scale.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Due to the design of DMARC [RFC7489] and the nature of the Internet</td><td> </td><td class="right"> Due to the design of DMARC [RFC7489] and the nature of the Internet</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> email architecture [RFC5598], there are interoperability issues</td><td> </td><td class="right"> email architecture [RFC5598], there are interoperability issues</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> associated with DMARC [RFC7489] deployment. These are discussed in</td><td> </td><td class="right"> associated with DMARC [RFC7489] deployment. These are discussed in</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Interoperability Issues between DMARC and Indirect Email Flows</td><td> </td><td class="right"> Interoperability Issues between DMARC and Indirect Email Flows</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0016" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> [RFC7960]. These issues are not applicable to PSDs, since they</td><td> </td><td class="rblock"> [RFC7960]. These issues are not <span class="insert">typically</span> applicable to PSDs, since</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> (e.g., the ".gov.example" used above) do not send mail.</td><td> </td><td class="rblock"> they (e.g., the ".gov.example" used above) do not <span class="insert">typically</span> send</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> </td><td> </td><td class="rblock"> mail.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">DMARC [RFC7489], by design, does not support usage by PSOs. For PSDs</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> that require use of DMARC [RFC7489], an extension of DMARC reporting</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> and enforcement capability is needed for PSO to effectively manage</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> and monitor implementation of PSD requirements.</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">2. Terminology and Definitions</td><td> </td><td class="right">2. Terminology and Definitions</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> This section defines terms used in the rest of the document.</td><td> </td><td class="right"> This section defines terms used in the rest of the document.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">2.1. Conventions Used in This Document</td><td> </td><td class="right">2.1. Conventions Used in This Document</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",</td><td> </td><td class="right"> The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and</td><td> </td><td class="right"> "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> "OPTIONAL" in this document are to be interpreted as described in</td><td> </td><td class="right"> "OPTIONAL" in this document are to be interpreted as described in</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all</td><td> </td><td class="right"> BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> capitals, as shown here.</td><td> </td><td class="right"> capitals, as shown here.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">2.2. Public Suffix Domain (PSD)</td><td> </td><td class="right">2.2. Public Suffix Domain (PSD)</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> The global Internet Domain Name System (DNS) is documented in</td><td> </td><td class="right"> The global Internet Domain Name System (DNS) is documented in</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> numerous Requests for Comment (RFC). It defines a tree of names</td><td> </td><td class="right"> numerous Requests for Comment (RFC). It defines a tree of names</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> starting with root, ".", immediately below which are Top Level Domain</td><td> </td><td class="right"> starting with root, ".", immediately below which are Top Level Domain</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> names such as ".com" and ".us". They are not available for private</td><td> </td><td class="right"> names such as ".com" and ".us". They are not available for private</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> registration. In many cases the public portion of the DNS tree is</td><td> </td><td class="right"> registration. In many cases the public portion of the DNS tree is</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0017" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> more than one level deep. <span class="delete">PSD DMARC includes all public domains</span></td><td> </td><td class="rblock"> more than one level deep.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> above the organizational level in the tree, e.g., ".gov.uk".</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">2.3. Longest PSD</td><td> </td><td class="right">2.3. Longest PSD</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0018" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> Organizational Domain (DMARC [RFC7489] Section 3.2) with one label</td><td> </td><td class="rblock"> Organizational Domain (DMARC [RFC7489] Section 3.2) with one <span class="insert">left-</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> removed.</td><td> </td><td class="rblock"><span class="insert"> most</span> label removed.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">2.4. Public Suffix Operator (PSO)</td><td> </td><td class="right">2.4. Public Suffix Operator (PSO)</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0019" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> A Public Suffix Operator manages operations within <span class="delete">their</span> PSD.</td><td> </td><td class="rblock"> A Public Suffix Operator manages operations within <span class="insert">its</span> PSD.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">2.5. PSO Controlled Domain Names</td><td> </td><td class="right">2.5. PSO Controlled Domain Names</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> PSO Controlled Domain Names are names in the DNS that are managed by</td><td> </td><td class="right"> PSO Controlled Domain Names are names in the DNS that are managed by</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> a PSO and are not available for use as Organizational Domains (the</td><td> </td><td class="right"> a PSO and are not available for use as Organizational Domains (the</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> term Organizational Domains is defined in DMARC [RFC7489]</td><td> </td><td class="right"> term Organizational Domains is defined in DMARC [RFC7489]</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Section 3.2). Depending on PSD policy, these will have one (e.g.,</td><td> </td><td class="right"> Section 3.2). Depending on PSD policy, these will have one (e.g.,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> ".com") or more (e.g., ".co.uk") name components.</td><td> </td><td class="right"> ".com") or more (e.g., ".co.uk") name components.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">2.6. Non-existent Domains</td><td> </td><td class="right">2.6. Non-existent Domains</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0020" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> For DMARC <span class="delete">[RFC7489]</span> purposes, a non-existent domain is a domain <span class="delete">name</span></td><td> </td><td class="rblock"> For DMARC purposes, a non-existent domain is a domain <span class="insert">for which there</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> that publishes none of</span> A, AAAA, <span class="delete">or</span> MX <span class="delete">records that the receiver is</span></td><td> </td><td class="rblock"><span class="insert"> is an NXDOMAIN or NODATA response for</span> A, AAAA, <span class="insert">and</span> MX <span class="insert">records.</span> This</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> willing to accept.</span> This is a broader definition than that in</td><td> </td><td class="rblock"> is a broader definition than that in NXDOMAIN [RFC8020].</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> NXDOMAIN [RFC8020].</td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">3. PSD DMARC Updates to DMARC Requirements</td><td> </td><td class="right">3. PSD DMARC Updates to DMARC Requirements</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> This document updates DMARC [RFC7489] as follows:</td><td> </td><td class="right"> This document updates DMARC [RFC7489] as follows:</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">3.1. General Updates</td><td> </td><td class="right">3.1. General Updates</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> References to "Domain Owners" also apply to PSOs.</td><td> </td><td class="right"> References to "Domain Owners" also apply to PSOs.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">3.2. Section 6.1 DMARC Policy Record</td><td> </td><td class="right">3.2. Section 6.1 DMARC Policy Record</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> PSD DMARC records are published as a subdomain of the PSD. For the</td><td> </td><td class="right"> PSD DMARC records are published as a subdomain of the PSD. For the</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> PSD ".example", the PSO would post DMARC policy in a TXT record at</td><td> </td><td class="right"> PSD ".example", the PSO would post DMARC policy in a TXT record at</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> "_dmarc.example".</td><td> </td><td class="right"> "_dmarc.example".</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0021" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock">3.3. Section 6.<span class="delete">5. Domain Owner Actions</span></td><td> </td><td class="rblock">3.3. Section 6.<span class="insert">3 General Record Format</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0022" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">In addition to the DMARC [RFC7489] domain owner actions, PSOs that</span></td><td> </td><td class="rblock"> <span class="insert">A new tag is added after fo:</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> require use of DMARC ought to make that information available to</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> receivers.</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0023" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock">3.4. Section 6.6.3. Policy Discovery</td><td> </td><td class="rblock"> <span class="insert">np: Requested Mail Receiver policy for non-existent subdomains</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> (plain-text; OPTIONAL). Indicates the policy to be enacted by the</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Receiver at the request of the Domain Owner. It applies only to</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> non-existent subdomains of the domain queried and not to either</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> existing subdomains or the domain itself. Its syntax is identical</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> to that of the "p" tag defined below. If the 'np' tag is absent,</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> the policy specified by the "sp" tag (if the 'sp' tag is present)</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> or the policy specified by the "p" tag, if the 'sp' tag is not</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> present, MUST be applied for non-existent subdomains. Note that</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> "np" will be ignored for DMARC records published on subdomains of</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Organizational Domains and PSDs due to the effect of the DMARC</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> policy discovery mechanism described in DMARC [RFC7489]</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Section 6.6.3.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> The following tag definitions from DMARC [RFC7489] are updated:</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> p: The sentence 'Policy applies to the domain queried and to</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> subdomains, unless subdomain policy is explicitly described using</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> the "sp" tag' is updated to read 'Policy applies to the domain</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> queried and to subdomains, unless subdomain policy is explicitly</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> described using the "sp" or "np" tags.'</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> sp: The sentence 'If absent, the policy specified by the "p" tag</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> MUST be applied for subdomains' is updated to read 'If both the</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> 'sp' tag is absent and the 'np' tag is either absent or not</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> applicable, the policy specified by the "p" tag MUST be applied</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> for subdomains.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock">3.4. <span class="insert">Section 6.5. Domain Owner Actions</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> In addition to the DMARC domain owner actions, PSOs that require use</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> of DMARC and participate in PSD DMARC ought to make that information</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> available to receivers. The mechanism for doing so is one of the</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> experimental elements of this document. See the experiment</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> description (Appendix A).</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert">3.5.</span> Section 6.6.3. Policy Discovery</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> A new step between step 3 and 4 is added:</td><td> </td><td class="right"> A new step between step 3 and 4 is added:</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> 3A. If the set is now empty and the longest PSD (Section 2.3) of the</td><td> </td><td class="right"> 3A. If the set is now empty and the longest PSD (Section 2.3) of the</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Organizational Domain is one that the receiver has determined is</td><td> </td><td class="right"> Organizational Domain is one that the receiver has determined is</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0024" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> acceptable for PSD <span class="delete">DMARC,</span> the Mail Receiver MUST query the DNS for</td><td> </td><td class="rblock"> acceptable for PSD <span class="insert">DMARC (discussed in the experiment description</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> a DMARC TXT record at the DNS domain matching the longest PSD</td><td> </td><td class="rblock"><span class="insert"> (Appendix A)),</span> the Mail Receiver MUST query the DNS for a DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> TXT record at the DNS domain matching the longest PSD</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> (Section 2.3) in place of the RFC5322.From domain in the message</td><td> </td><td class="right"> (Section 2.3) in place of the RFC5322.From domain in the message</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> (if different). A possibly empty set of records is returned.</td><td> </td><td class="right"> (if different). A possibly empty set of records is returned.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> As an example, for a message with the Organizational Domain of</td><td> </td><td class="right"> As an example, for a message with the Organizational Domain of</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> "example.compute.cloudcompany.com.cctld", the query for PSD DMARC</td><td> </td><td class="right"> "example.compute.cloudcompany.com.cctld", the query for PSD DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> would use "compute.cloudcompany.com.cctld" as the longest PSD</td><td> </td><td class="right"> would use "compute.cloudcompany.com.cctld" as the longest PSD</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> (Section 2.3). The receiver would check to see if that PSD is listed</td><td> </td><td class="right"> (Section 2.3). The receiver would check to see if that PSD is listed</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> in the DMARC PSD Registry, and if so, perform the policy lookup at</td><td> </td><td class="right"> in the DMARC PSD Registry, and if so, perform the policy lookup at</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> "_dmarc.compute.cloudcompany.com.cctld".</td><td> </td><td class="right"> "_dmarc.compute.cloudcompany.com.cctld".</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Note: Because the PSD policy query comes after the Organizational</td><td> </td><td class="right"> Note: Because the PSD policy query comes after the Organizational</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Domain policy query, PSD policy is not used for Organizational</td><td> </td><td class="right"> Domain policy query, PSD policy is not used for Organizational</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0025" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> domains that have published a DMARC <span class="delete">[RFC7489]</span> policy. Specifically,</td><td> </td><td class="rblock"> domains that have published a DMARC policy. Specifically, this is</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> this is not a mechanism to provide feedback addresses (RUA/RUF) when</td><td> </td><td class="rblock"> not a mechanism to provide feedback addresses (RUA/RUF) when an</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> an Organizational Domain has declined to do so.</td><td> </td><td class="rblock"> Organizational Domain has declined to do so.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0026" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock">3.<span class="delete">5</span>. Section 7. DMARC Feedback</td><td> </td><td class="rblock">3.<span class="insert">6</span>. Section 7. DMARC Feedback</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Operational note for PSD DMARC: For PSOs, feedback for non-existent</td><td> </td><td class="right"> Operational note for PSD DMARC: For PSOs, feedback for non-existent</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0027" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> domains is <span class="delete">desired</span> and <span class="delete">useful.</span> See Section 4 for discussion of</td><td> </td><td class="rblock"> domains is <span class="insert">desirable</span> and <span class="insert">useful, just as it is for org-level DMARC</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> Privacy Considerations.</td><td> </td><td class="rblock"><span class="insert"> operators.</span> See Section 4 <span class="insert">of this document</span> for discussion of Privacy</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> Considerations.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">4. Privacy Considerations</td><td> </td><td class="right">4. Privacy Considerations</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0028" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> These privacy considerations are developed based on the requireme<span class="delete">tn</span>s</td><td> </td><td class="rblock"> These privacy considerations are developed based on the requireme<span class="insert">nt</span>s</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> of [RFC6973]. The Privacy Considerations of [RFC7489] apply to this</td><td> </td><td class="right"> of [RFC6973]. The Privacy Considerations of [RFC7489] apply to this</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> document.</td><td> </td><td class="right"> document.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">4.1. Feedback leakage</td><td> </td><td class="right">4.1. Feedback leakage</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Providing feedback reporting to PSOs can, in some cases, create</td><td> </td><td class="right"> Providing feedback reporting to PSOs can, in some cases, create</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> leakage of information outside of an organization to the PSO. This</td><td> </td><td class="right"> leakage of information outside of an organization to the PSO. This</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0029" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> leakage could <span class="delete">be </span>potentially be utilized as part of a program of</td><td> </td><td class="rblock"> leakage could potentially be utilized as part of a program of</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> pervasive surveillance (See [RFC7624]). There are roughly three</td><td> </td><td class="right"> pervasive surveillance (See [RFC7624]). There are roughly three</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> cases to consider:</td><td> </td><td class="right"> cases to consider:</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> o Single Organization PSDs (e.g., ".google"), RUA and RUF reports</td><td> </td><td class="right"> o Single Organization PSDs (e.g., ".google"), RUA and RUF reports</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> based on PSD DMARC have the potential to contain information about</td><td> </td><td class="right"> based on PSD DMARC have the potential to contain information about</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> emails related to entities managed by the organization. Since</td><td> </td><td class="right"> emails related to entities managed by the organization. Since</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> both the PSO and the Organizational Domain owners are common,</td><td> </td><td class="right"> both the PSO and the Organizational Domain owners are common,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> there is no additional privacy risk for either normal or non-</td><td> </td><td class="right"> there is no additional privacy risk for either normal or non-</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> existent Domain reporting due to PSD DMARC.</td><td> </td><td class="right"> existent Domain reporting due to PSD DMARC.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr bgcolor="gray" ><td></td><th><a name="part-l2" /><small>skipping to change at</small><em> page 7, line 24</em></th><th> </th><th><a name="part-r2" /><small>skipping to change at</small><em> page 8, line 37</em></th><td></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> compliance with PSD policy. Data on non-existent cousin domains</td><td> </td><td class="right"> compliance with PSD policy. Data on non-existent cousin domains</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> would be sent to the PSO.</td><td> </td><td class="right"> would be sent to the PSO.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> o Multi-organization PSDs (e.g., ".com") that do not mandate DMARC</td><td> </td><td class="right"> o Multi-organization PSDs (e.g., ".com") that do not mandate DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> usage: Privacy risks for Organizational Domains that have not</td><td> </td><td class="right"> usage: Privacy risks for Organizational Domains that have not</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> deployed DMARC within such PSDs are significant. For non-DMARC</td><td> </td><td class="right"> deployed DMARC within such PSDs are significant. For non-DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Organizational Domains, all DMARC feedback will be directed to the</td><td> </td><td class="right"> Organizational Domains, all DMARC feedback will be directed to the</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> PSO. PSD DMARC is opt-out (by publishing a DMARC record at the</td><td> </td><td class="right"> PSO. PSD DMARC is opt-out (by publishing a DMARC record at the</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Organizational Domain level) vice opt-in, which would be the more</td><td> </td><td class="right"> Organizational Domain level) vice opt-in, which would be the more</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> desirable characteristic. This means that any non-DMARC</td><td> </td><td class="right"> desirable characteristic. This means that any non-DMARC</td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0030" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> organizational domain would have it<span class="delete">'</span>s feedback reports redirected</td><td> </td><td class="rblock"> organizational domain would have its feedback reports redirected</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> to the PSO. The content of such reports, particularly for</td><td> </td><td class="right"> to the PSO. The content of such reports, particularly for</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> existing domains, is privacy sensitive.</td><td> </td><td class="right"> existing domains, is privacy sensitive.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> PSOs will receive feedback on non-existent domains, which may be</td><td> </td><td class="right"> PSOs will receive feedback on non-existent domains, which may be</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> similar to existing Organizational Domains. Feedback related to such</td><td> </td><td class="right"> similar to existing Organizational Domains. Feedback related to such</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> cousin domains have a small risk of carrying information related to</td><td> </td><td class="right"> cousin domains have a small risk of carrying information related to</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> an actual Organizational Domain. To minimize this potential concern,</td><td> </td><td class="right"> an actual Organizational Domain. To minimize this potential concern,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> PSD DMARC feedback is best limited to Aggregate Reports. Feedback</td><td> </td><td class="right"> PSD DMARC feedback is best limited to Aggregate Reports. Feedback</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Reports carry more detailed information and present a greater risk.</td><td> </td><td class="right"> Reports carry more detailed information and present a greater risk.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr bgcolor="gray" ><td></td><th><a name="part-l3" /><small>skipping to change at</small><em> page 7, line 47</em></th><th> </th><th><a name="part-r3" /><small>skipping to change at</small><em> page 9, line 12</em></th><td></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> not particpate in DMARC, any Feedback Reporting related to multi-</td><td> </td><td class="right"> not particpate in DMARC, any Feedback Reporting related to multi-</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> organizational PSDs ought to be limited to non-existent domains</td><td> </td><td class="right"> organizational PSDs ought to be limited to non-existent domains</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> except in cases where the reporter knows that PSO requires use of</td><td> </td><td class="right"> except in cases where the reporter knows that PSO requires use of</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> DMARC.</td><td> </td><td class="right"> DMARC.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">5. Security Considerations</td><td> </td><td class="right">5. Security Considerations</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> This document does not change the Security Considerations of</td><td> </td><td class="right"> This document does not change the Security Considerations of</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [RFC7489] and [RFC7960].</td><td> </td><td class="right"> [RFC7489] and [RFC7960].</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0031" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> <span class="insert">The risks of the issues identified in [RFC7489], Section 12.3, DNS</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Security, are amplified by PSD DMARC. In particular, DNS cache</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> poisoning (or Name Chaining), see [RFC3833] for details, consequences</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> are increased because a sucessful attack would potentially have a</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> much wider scope.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> The risks of the issues identified in [RFC7489], Section 12.5,</td><td> </td><td class="right"> The risks of the issues identified in [RFC7489], Section 12.5,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> External Reporting Addresses, are amplified by PSD DMARC. By design,</td><td> </td><td class="right"> External Reporting Addresses, are amplified by PSD DMARC. By design,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> PSD DMARC causes unrequested reporting of feedback to entities</td><td> </td><td class="right"> PSD DMARC causes unrequested reporting of feedback to entities</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> external to the Organizational Domain. This is discussed in more</td><td> </td><td class="right"> external to the Organizational Domain. This is discussed in more</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> detail in Section 4.</td><td> </td><td class="right"> detail in Section 4.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">6. IANA Considerations</td><td> </td><td class="right">6. IANA Considerations</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0032" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> This <span class="delete">document does not require any</span> IANA <span class="delete">actions.</span></td><td> </td><td class="rblock"> This <span class="insert">section describes actions requested to be completed by IANA.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert">6.1. Subdomain Policy Tag</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> IANA <span class="insert">is requested to add a new tag to DMARC Tag Registry in the</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Domain-based Message Authentication, Reporting, and Conformance</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> (DMARC) Parameters Registry.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> The entry is as follows:</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> +----------+-----------+---------+-------------------------------+</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> | Tag Name | Reference | Status | Description |</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> +----------+-----------+---------+-------------------------------+</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> | np | this | current | Requested handling policy for |</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> | | document | | non-existent subdomains |</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> +----------+-----------+---------+-------------------------------+</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">7. References</td><td> </td><td class="right">7. References</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">7.1. Normative References</td><td> </td><td class="right">7.1. Normative References</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate</td><td> </td><td class="right"> [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Requirement Levels", BCP 14, RFC 2119,</td><td> </td><td class="right"> Requirement Levels", BCP 14, RFC 2119,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> DOI 10.17487/RFC2119, March 1997,</td><td> </td><td class="right"> DOI 10.17487/RFC2119, March 1997,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> <https://www.rfc-editor.org/info/rfc2119>.</td><td> </td><td class="right"> <https://www.rfc-editor.org/info/rfc2119>.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr bgcolor="gray" ><td></td><th><a name="part-l4" /><small>skipping to change at</small><em> page 8, line 36</em></th><th> </th><th><a name="part-r4" /><small>skipping to change at</small><em> page 10, line 23</em></th><td></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">7.2. Informative References</td><td> </td><td class="right">7.2. Informative References</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [psddmarc.org]</td><td> </td><td class="right"> [psddmarc.org]</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> multiple, "PSD DMARC Web Site", April 2019,</td><td> </td><td class="right"> multiple, "PSD DMARC Web Site", April 2019,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> <https://psddmarc.org/>.</td><td> </td><td class="right"> <https://psddmarc.org/>.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [PSL] multiple, "Public Suffix List", April 2019,</td><td> </td><td class="right"> [PSL] multiple, "Public Suffix List", April 2019,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> <https://publicsuffix.org/>.</td><td> </td><td class="right"> <https://publicsuffix.org/>.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0033" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> <span class="insert">[RFC3833] Atkins, D. and R. Austein, "Threat Analysis of the Domain</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Name System (DNS)", RFC 3833, DOI 10.17487/RFC3833, August</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> 2004, <https://www.rfc-editor.org/info/rfc3833>.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [RFC5226] Narten, T. and H. Alvestrand, "Guidelines for Writing an</td><td> </td><td class="right"> [RFC5226] Narten, T. and H. Alvestrand, "Guidelines for Writing an</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> IANA Considerations Section in RFCs", RFC 5226,</td><td> </td><td class="right"> IANA Considerations Section in RFCs", RFC 5226,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> DOI 10.17487/RFC5226, May 2008,</td><td> </td><td class="right"> DOI 10.17487/RFC5226, May 2008,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> <https://www.rfc-editor.org/info/rfc5226>.</td><td> </td><td class="right"> <https://www.rfc-editor.org/info/rfc5226>.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [RFC5598] Crocker, D., "Internet Mail Architecture", RFC 5598,</td><td> </td><td class="right"> [RFC5598] Crocker, D., "Internet Mail Architecture", RFC 5598,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> DOI 10.17487/RFC5598, July 2009,</td><td> </td><td class="right"> DOI 10.17487/RFC5598, July 2009,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> <https://www.rfc-editor.org/info/rfc5598>.</td><td> </td><td class="right"> <https://www.rfc-editor.org/info/rfc5598>.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [RFC6973] Cooper, A., Tschofenig, H., Aboba, B., Peterson, J.,</td><td> </td><td class="right"> [RFC6973] Cooper, A., Tschofenig, H., Aboba, B., Peterson, J.,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr bgcolor="gray" ><td></td><th><a name="part-l5" /><small>skipping to change at</small><em> page 9, line 25</em></th><th> </th><th><a name="part-r5" /><small>skipping to change at</small><em> page 11, line 18</em></th><td></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> and Conformance (DMARC) and Indirect Email Flows",</td><td> </td><td class="right"> and Conformance (DMARC) and Indirect Email Flows",</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> RFC 7960, DOI 10.17487/RFC7960, September 2016,</td><td> </td><td class="right"> RFC 7960, DOI 10.17487/RFC7960, September 2016,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> <https://www.rfc-editor.org/info/rfc7960>.</td><td> </td><td class="right"> <https://www.rfc-editor.org/info/rfc7960>.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [RFC8020] Bortzmeyer, S. and S. Huque, "NXDOMAIN: There Really Is</td><td> </td><td class="right"> [RFC8020] Bortzmeyer, S. and S. Huque, "NXDOMAIN: There Really Is</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> Nothing Underneath", RFC 8020, DOI 10.17487/RFC8020,</td><td> </td><td class="right"> Nothing Underneath", RFC 8020, DOI 10.17487/RFC8020,</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> November 2016, <https://www.rfc-editor.org/info/rfc8020>.</td><td> </td><td class="right"> November 2016, <https://www.rfc-editor.org/info/rfc8020>.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">Appendix A. The Experiment</td><td> </td><td class="right">Appendix A. The Experiment</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0034" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> <span class="insert">There are two experimental questions addressed in this document: one</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> regarding mitigation of PSD related privacy concerns and the other on</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> the utility of specifying separate DMARC policies for non-existent</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> sub-domains.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Aditionally, as of the writing of this document operational and</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> policy constraints prevent this experiment from being deployed</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> globally. If the experiment shows that PSD DMARC solves a real</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> problem and can be used at a large scale, the results could prove to</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> be useful in removing constraints outside of the IETF that would</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> permit broader deployment".</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert">A.1. PSD DMARC Privacy Concern Mitigation</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> To mitigate the privacy concerns associated with Multi-organization</td><td> </td><td class="right"> To mitigate the privacy concerns associated with Multi-organization</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> PSDs that do not mandate DMARC usage, see Section 4.1, a mechanism to</td><td> </td><td class="right"> PSDs that do not mandate DMARC usage, see Section 4.1, a mechanism to</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> indicate which PSDs do not present this privacy risk is appropriate.</td><td> </td><td class="right"> indicate which PSDs do not present this privacy risk is appropriate.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> There are multiple approaches that are possible.</td><td> </td><td class="right"> There are multiple approaches that are possible.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> The experiment is to evaluate different possible approaches. The</td><td> </td><td class="right"> The experiment is to evaluate different possible approaches. The</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> experiment will be complete when there is rough consensus on a</td><td> </td><td class="right"> experiment will be complete when there is rough consensus on a</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> technical approach that is demonstrated to be operationally usable</td><td> </td><td class="right"> technical approach that is demonstrated to be operationally usable</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> and effective at mitigating the privacy concern.</td><td> </td><td class="right"> and effective at mitigating the privacy concern.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr>
<tr bgcolor="gray" ><td></td><th><a name="part-l6" /><small>skipping to change at</small><em> page 10, line 15</em></th><th> </th><th><a name="part-r6" /><small>skipping to change at</small><em> page 12, line 22</em></th><td></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> As of this writing, three approaches have been proposed. None of</td><td> </td><td class="right"> As of this writing, three approaches have been proposed. None of</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> them are ideal:</td><td> </td><td class="right"> them are ideal:</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> o An extension to the Public Suffix List at [PSL]</td><td> </td><td class="right"> o An extension to the Public Suffix List at [PSL]</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> o A dedicated registry queried via DNS - an example of such a</td><td> </td><td class="right"> o A dedicated registry queried via DNS - an example of such a</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> service is described in Appendix B.1 below</td><td> </td><td class="right"> service is described in Appendix B.1 below</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> o An IANA registry</td><td> </td><td class="right"> o An IANA registry</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0035" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert">A.2. Non-Existent Subdomain Policy</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> PSOs that plan to implement PSD DMARC have indicated that the ability</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> to describe distinct policies for existing and non- existing sub-</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> domains would facilitate PSD DMARC deployment. There are also</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> suggestions that it would be more generally useful for DMARC.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"></span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> During the period of the experiment, uptake of the new 'np' tag will</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> be evaluated to support assessment of the utility of including 'np'</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> in a future, non-experimental update.</span></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"> </td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">Appendix B. DMARC PSD Registry Examples</td><td> </td><td class="right">Appendix B. DMARC PSD Registry Examples</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td><a name="diff0036" /></td></tr>
<tr><td class="lineno" valign="top"></td><td class="lblock"> To faciliate experimentation around data leakage mitigation, samples</td><td> </td><td class="rblock"> To facili<span class="insert">t</span>ate experimentation around data leakage mitigation, samples</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> of the DNS based and IANA like registries are available at</td><td> </td><td class="right"> of the DNS based and IANA like registries are available at</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [psddmarc.org].</td><td> </td><td class="right"> [psddmarc.org].</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left">B.1. DMARC PSD DNS Query Service</td><td> </td><td class="right">B.1. DMARC PSD DNS Query Service</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> A sample stand-alone DNS query service is available at</td><td> </td><td class="right"> A sample stand-alone DNS query service is available at</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> [psddmarc.org]. It was developed based on the contents suggested for</td><td> </td><td class="right"> [psddmarc.org]. It was developed based on the contents suggested for</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> an IANA registry in an earlier revision of this draft. Usage of the</td><td> </td><td class="right"> an IANA registry in an earlier revision of this draft. Usage of the</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"> service is described on the web site.</td><td> </td><td class="right"> service is described on the web site.</td><td class="lineno" valign="top"></td></tr>
<tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr>
<tr><td></td><td class="left"></td><td> </td><td class="right"></td><td></td></tr>
<tr bgcolor="gray"><th colspan="5" align="center"><a name="end"> End of changes. 36 change blocks. </a></th></tr>
<tr class="stats"><td></td><th><i>103 lines changed or deleted</i></th><th><i> </i></th><th><i>204 lines changed or added</i></th><td></td></tr>
<tr><td colspan="5" align="center" class="small"><br/>This html diff was produced by rfcdiff 1.41. The latest version is available from <a href="http://www.tools.ietf.org/tools/rfcdiff/" >http://tools.ietf.org/tools/rfcdiff/</a> </td></tr>
</table>
</body>
</html>