I think it's prudent for us to add two more report types for both ADSP and DKIM: "p", meaning the DKIM or ADSP test failed for local policy reasons, and "o", meaning there was a problem with DKIM or ADSP that was something other than the report types already listed.
DKIM in particular can be presented a perfectly valid DKIM signature that verifies, but the verifier could decide it doesn't want to accept the signature anyway for policy reasons, including (real use cases here) Subject: wasn't signed, or "l=" didn't cover enough of the message percentage-wise. The existing report requests don't cover those. I don't know if there's an SPF equivalent for "p", but I suspect adding the "o" case would be a good idea. -MSK
_______________________________________________ marf mailing list [email protected] https://www.ietf.org/mailman/listinfo/marf
