Comments

Hacker News

two words: compensating control.

(But also setup dmarc)

by fragmede

Took me too long to realize this has nothing to do with the Peripheral Component Interconnect or Direct Memory Access

by yonatan8070

> The best practice is a policy banning PAN over email, instant messaging, SMS, and chat entirely.

Sounds silly to me. A PAN should never even touch an employee's computer.

by CodesInChaos

Kind of a weird post, since it acknowledges in the first 1/3rd that you don't need DMARC for PCI compliance.

by tptacek

this article takes more time to read than dmarc takes to implement

by john_strinlai

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

  • Hacker News
  • two words: compensating control.

    (But also setup dmarc)

  • Took me too long to realize this has nothing to do with the Peripheral Component Interconnect or Direct Memory Access
  • > The best practice is a policy banning PAN over email, instant messaging, SMS, and chat entirely.

    Sounds silly to me. A PAN should never even touch an employee's computer.

  • Kind of a weird post, since it acknowledges in the first 1/3rd that you don't need DMARC for PCI compliance.
  • this article takes more time to read than dmarc takes to implement
PCI DSS DMARC Requirement: What Section 5.4.1 Requires · Birbla