Microsoft O365 labels nanog potential fraud?

[ahodgson at lists.simkin.ca (Alan Hodgson)]

On Wednesday 29 March 2017 23:28:18 Carl Byington wrote:
> Would dmarc-spf consider marketo-email.box.com to be 'aligned' with the
> from header email.box.com domain? It is neither a child nor parent of
> email.box.com.
> 

As long as they're under the same Organizational Domain they should pass a 
relaxed mode test. The examples are somewhat meager in the RFC but the wording 
in section 3.1 seems clear. If senders want a tighter policy they have strict 
mode available.