[Bug 8087] DMARC check ignores sp= for subdomains

[bu...@spamassassin.apache.org]

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8087

Sidney Markowitz <si...@sidney.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sidney@sidney.com

--- Comment #1 from Sidney Markowitz <si...@sidney.com> ---
If I understand this correctly, if a subdomain does not have its own DMARC
record, it inherits everything from the record of the base domain except for
the policy, p. Instead it uses the value in sp (subdomain policy). So nic.at
has a policy of "reject" and news.nic.at has a policy of "none". But
SpamAssassin is using the inherited policy of "reject" for new.nic.at instead
of using the sp value.

Is that a fair summary of the bug?

With the release of 4.0.0 being really imminent, I would like to hear arguments
pro and con whether this bug is a big enough issue to block the 4.0.0 release,
or if it justifies a very quick 4.0.1 release, or it can be delayed.

Presenting a patch that is small and safe enough and fixes the whole problem
could be an argument for including this in 4.0.0 or a quick 4.0.1. Otherwise a
discussion on the impacts this bug has is appropriate.

-- 
You are receiving this mail because:
You are the assignee for the bug.