Hi list members,
We see many aggregate reports where <policy_published><domain> is a subdomain
which does not publish a DMARC record. The DMARC record is on the organisation
domain.
The specification (RFC 7489 appendix C) says this should be the domain at which
the DMARC record was found, not the RFC5322 From domain:
<!-- The DMARC policy that applied to the messages in
this report. -->
<xs:complexType name="PolicyPublishedType">
<xs:all>
<!-- The domain at which the DMARC record was found. -->
<xs:element name="domain" type="xs:string"/>
It’s so widespread it looks like some DMARC reporting software is broken. In
one of the reports I saw "X-Mailer: opendmarc-reports v1.3.2".
Do others notice this as well? And how do you treat these reports, drop them or
fix them?
Thanks,
Maarten Oelering
Postmastery
_______________________________________________
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
