I echo Scott's position. Understanding certain reasons for a daily increases (or decreases) in authentication failures is possible when you know the passing volume as well as the failing volume. Domains with sending volumes that vary widely day to day for example, will have failure volumes that vary widely. Is the increase due to a problem or is there is just more mail being sent and the failure rate is normal?
Mike On Tue, Jan 21, 2014 at 1:09 PM, Scott Kitterman <[email protected]>wrote: > On Tuesday, January 21, 2014 12:55:26 Murray S. Kucherawy wrote: > > I've received a feature request for OpenDMARC to limit what goes into > > aggregate reports. Specifically, the suggestion is not to store any data > > regarding messages that pass the DMARC test and thus only report on > things > > that fail. > > > > I don't believe the current specification says anything requiring that > all > > messages be recorded, so I think this wouldn't violate the specification, > > but it might violate the spirit of what was intended or what's desirable > to > > Domain Owners. > > > > Comments? > > I've done statistical analysis on DMARC aggregate reports (and similar > reporting) that can't be done without knowing the total population. If the > results in the aggregate report are filtered, I think it'd be very useful > to > know that. I don't think there's currently any way to indicate it though. > > Scott K > _______________________________________________ > dmarc mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/dmarc >
_______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
