What about DHS's BOD 18-01 which cites DMARC? I know that's probably a mere statute but it's close.
--Kurt (apologies for the top post, but microscreen MUAs are limited)
On Sun, Jul 22, 2018, 18:44 John R. Levine <johnl@xxxxxxxx> wrote:
Laws often use standards published by private organizations. For example,
most state building codes in the US require that construction comply with
the National Electrical Code published by the private National Fire
Protection Association. This has caused some interesting situations when
you have to buy a copy of the standard to find out what the law is. (Blog
post coming soon.)
Our standards don't have that problem since we long ago decided to give
them away for free. Are there laws in the US or elsewhere that use IETF
standards?
I took the direct approach of searching the Cornell LII's US law archive
for "RFC". There were about a dozen RFC references in the Code of Federal
Regulations, and a lot court cases about the depression-era Reconstruction
Finance Corp., but nothing in a statute.
R's,
John
