Proper Way to Configure a Domain which never sends emails

[John Levine]

In article <mailman.942.1566297977.711.bind-users at lists.isc.org> you write:
>El 20/08/2019 a las 9:28, Marco Davids via bind-users escribió:
>> A TXT _dmarc.domain.tld "v=DMARC1; p=reject" might also be useful.

>Wouldn't that imply having DKIM set up for the domain?

No, of course not.

It says that if mail isn't authenticated, reject it.  An excellent way
to be sure you never get DKIM authentication is not to set up DKIM in
the first place.