Everywhere is written the same thing!

Значений dkim= может быть три: all — Все письма должны быть подписаны discardable — Не подписанные письма не должны приниматься unknown — Аналогично отсутствию записи

I need the strictest option so that And all letters are signed, And all unsigned letters are rejected. But based on these definitions, as far as I understand, I either have to choose one of these, or I have to specify both of them.

  • one
    None of the values ​​can be used, because ADSP is declared obsolete as early as 2013 - andreymal
  • one
    And instead of ADSP it seems like there is a DMARC - andreymal
  • @andreymal That is, if I have a record _dmarc TXT v=DMARC1; p=reject _dmarc TXT v=DMARC1; p=reject then this (for google) is enough? And _adsp._domainkey Can I remove it altogether? - Ilya Indigo

1 answer 1

ADSP has long been outdated and replaced it with DMARC with quite obvious syntax.

 v=DMARC1; p=reject; sp=reject; ruf=mailto:postmaster@example.com; fo=1