From 5d211db1e52d22b61588a906badb23d1e374f650 Mon Sep 17 00:00:00 2001 From: Zhang Huangbin Date: Mon, 28 Dec 2020 12:26:50 +0800 Subject: [PATCH] Place 'p' tag after 'v' according to RFC 7489. --- en_US/installation/0-setup.dns.md | 12 ++++++++---- html/setup.dns.html | 14 ++++++++++---- 2 files changed, 18 insertions(+), 8 deletions(-) diff --git a/en_US/installation/0-setup.dns.md b/en_US/installation/0-setup.dns.md index 5e363e98..46f41082 100644 --- a/en_US/installation/0-setup.dns.md +++ b/en_US/installation/0-setup.dns.md @@ -311,7 +311,7 @@ v=DMARC1; p=none; rua=mailto:dmarc@mydomain.com A detailed sample record looks like this: ``` -v=DMARC1; adkim=s; aspf=s; p=reject; sp=none; rua=mailto:dmarc@mydomain.com; ruf=mailto:dmarc@mydomain.com +v=DMARC1; p=reject; sp=none; adkim=s; aspf=s; rua=mailto:dmarc@mydomain.com; ruf=mailto:dmarc@mydomain.com ``` * `v=DMARC1` identifies the DMARC protocol version, currently only `DMARC1` is @@ -337,9 +337,13 @@ v=DMARC1; adkim=s; aspf=s; p=reject; sp=none; rua=mailto:dmarc@mydomain.com; ruf !!! attention - If you're sure all your emails are sent by the server(s) listed in SPF - record, or have correct DKIM signature signed, `p=reject` is strongly - recommended. + - If you're sure all your emails are sent by the server(s) listed in SPF + record, or have correct DKIM signature signed, `p=reject` is strongly + recommended. + - According to [RFC 7489](https://tools.ietf.org/html/rfc7489#section-6.3), + __the "v" and "p" tags MUST be present and MUST appear in that order.__ + so please always place "p" tag immediately follow the "v" tag. e.g. + `v=DMARC1; p=reject; aspf=s; ...` is ok, but not `v=DMARC1; aspf=s; p=reject; ...`. * `sp` specifies policy for all subdomains. This is optional. Available options are same as `p`. diff --git a/html/setup.dns.html b/html/setup.dns.html index d182883f..cadb1358 100644 --- a/html/setup.dns.html +++ b/html/setup.dns.html @@ -317,7 +317,7 @@ correct and up to date SPF and DKIM records published.

A detailed sample record looks like this:

-
v=DMARC1; adkim=s; aspf=s; p=reject; sp=none; rua=mailto:dmarc@mydomain.com; ruf=mailto:dmarc@mydomain.com
+
v=DMARC1; p=reject; sp=none; adkim=s; aspf=s; rua=mailto:dmarc@mydomain.com; ruf=mailto:dmarc@mydomain.com
 

 
 
    
@@ -349,9 +349,15 @@ correct and up to date SPF and DKIM records published.
    
 

 

 
Attention

-
If you're sure all your emails are sent by the server(s) listed in SPF
-record, or have correct DKIM signature signed, p=reject is strongly
-recommended.

+
    
+
  • If you're sure all your emails are sent by the server(s) listed in SPF
+  record, or have correct DKIM signature signed, p=reject is strongly
+  recommended.
    • 
+
  • According to RFC 7489,
+  the "v" and "p" tags MUST be present and MUST appear in that order.
+  so please always place "p" tag immediately follow the "v" tag. e.g.
+  v=DMARC1; p=reject; aspf=s; ... is ok, but not v=DMARC1; aspf=s; p=reject; ....
    • 
+

 

 
 
  •