3 ms·

PCI DSS DMARC Requirement: What Section 5.4.1 Requires

• john_strinlai 3mo ago
  this article takes more time to read than dmarc takes to implement
• CodesInChaos 3mo ago
  > The best practice is a policy banning PAN over email, instant messaging, SMS, and chat entirely. Sounds silly to me. A PAN should never even touch an employee's computer.
  • dogma1138 3mo ago
    There are cases for card not present transactions, fraud and complex refunds but generally yes.
• tptacek 3mo ago
  Kind of a weird post, since it acknowledges in the first 1/3rd that you don't need DMARC for PCI compliance.
• fragmede 3mo ago
  two words: compensating control. (But also setup dmarc)
• yonatan8070 3mo ago
  Took me too long to realize this has nothing to do with the Peripheral Component Interconnect or Direct Memory Access