PCI DSS DMARC Requirement: What Section 5.4.1 Requires

mmeysamazad about 3 hours ago 4 commentsRead Article on dmarcguard.io

Discussion Sentiment

100% Positive

Analyzed from 63 words in the discussion.

Discussion (4 Comments)Read Original on HackerNews

tptacek•25 minutes ago

Kind of a weird post, since it acknowledges in the first 1/3rd that you don't need DMARC for PCI compliance.

CodesInChaos•about 1 hour ago

> The best practice is a policy banning PAN over email, instant messaging, SMS, and chat entirely.

Sounds silly to me. A PAN should never even touch an employee's computer.

dogma1138•42 minutes ago

There are cases for card not present transactions, fraud and complex refunds but generally yes.

john_strinlai•about 2 hours ago

this article takes more time to read than dmarc takes to implement