Google is now using ARC results for local policy DMARC passes. This should be visible in your DMARC rua reports as "arc=pass" in the local policy comment field.
This should replace most instances in your reports of xoar=pass. There are still some cases where xoar passes and arc does not, mostly because xoar is always the last hop and replaces any existing one, so it works in cases where the arc chain breaks. Ie, arc would need the ability to restart broken chains to be equivalent, though it's not clear that the extra covered cases would be that useful, definitely edge cases. If/when some other major sites like ietf.org enable arc signing, we can add them to the whitelist. Automated trust is going to require a larger rollout to be effective, and we haven't started working on that yet. Brandon
_______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc
