It's certainly permissible to report them, but there is no guidance about doing
so. In particular, it's totally spec compliant to report any one DKIM result,
DMARC-relevant or not. Or, as Tomki pointed out, to report all of them, even if
there are two identical signatures with identical results. One of these
behaviors is more annoying than the other, but the spec doesn't even make a
gentle suggestion that the correct answer is to report all unique
domain-selector-result triples, or maybe all results relevant to the decision,
or at least if you're only going to do one to make it a relevant one. It just
says "The DKIM identifier evaluated and the DKIM result, if any".
Elizabeth
On Sunday, July 10, 2016 2:27 PM, Juri Haberland via dmarc-discuss
<[email protected]> wrote:
On 07.07.2016 18:53, Elizabeth Zwicky via dmarc-discuss wrote:
>
> I meant to say that the spec is unclear about what you do about **reporting**
> multiple DKIM results. It's perfectly clear on how to evaluate them.
> Elizabeth
The way I understand the DMARC RFC it is valid to have multiple dkim
sections in one auth_result section, as the RFC states in Appendix C: DMARC
XML Scheme:
> <!-- This element contains DKIM and SPF results, uninterpreted with respect
> to DMARC. -->
> <xs:complexType name="AuthResultType">
> <xs:sequence>
> <!-- There may be no DKIM signatures, or multiple DKIM signatures. -->
> <xs:element name="dkim" type="DKIMAuthResultType"
> minOccurs="0" maxOccurs="unbounded"/>
> <!-- There will always be at least one SPF result. -->
> <xs:element name="spf" type="SPFAuthResultType" minOccurs="1"
> maxOccurs="unbounded"/>
> </xs:sequence>
> </xs:complexType>
Notice the maxOccurs="unbounded" in the element named dkim.
Juri
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
