On 4/23/2014 11:28 AM, Pete Resnick wrote:
> On 4/23/14 12:35 PM, Dave Crocker wrote:
>> On 4/22/2014 5:30 PM, Martin Rex wrote:
>>> RFC5322.From might contain no DNS domain to begin with.
>> So a From: field address with no domain name has never been valid for
>> "Internet" email.
>
> Well, except http://tools.ietf.org/html/rfc6854
Pete's right; I forgot about this update.
You seem to be saying that that doc counters my assertion.
It does. RFC 6854 changes the syntax of From: header fields to allow an
address-list. The ABNF from there is:
address-list = (address *("," address)) / obs-addr-list
address = mailbox / group
group = display-name ":" [group-list] ";" [CFWS]
Note that group list is optional, so something like:
From: group: ;
is now legal. In fact RFC 6854 contains this example:
From: Nightly Monitor Robot:;
I don't see a domain in there. Do you? I note that RFC 6854 exists precisly
because of the legitimate applications I've been talking about that need a way
to generate a legitimate message.
And IMO DMARC needs to take such usage into account.
Ned