I can't say for all DMARC implementers, but in our case concerns about (not) sending forensic reports are security and legal issues, not the size of message body. According to regulations, technical information about message, including not only headers, but also log records, BTW, is considered as a part of the message and, as such, is protected by mail privacy lows and can only be disclosed to sender or recipient or by the court order. We have to obey these rules at least before DMARC is accepted as a standard (technical regulations accept international standards).
There are also security concerns: forensic reports may disclosure redirect targets / mailing lists members. Anyway, standards already allow implementer to send headers only, and even more - implementer may choose to send only subset of selected headers. Some public mailbox providers are sending forensic reports like these to trusted destinations. So it's unlikely somebody would be willing to send forensics as a result of this new option. 15.12.2016 1:08, John Comfort via dmarc-discuss пишет: > As a result of mail receivers not sending forensic reports, the amount > of time to migrate to a reject policy can increase considerably. It > would be a nice option within the DMARC RFC to specify a new switch > indicating the desire to receive header-only forensic reports. The > expectation being that all mail receivers would be willing to send > these snipped reports. This would negate the concerns of privacy > (because the body of the message is not sent), and negate the concerns > of shipping large email body data back to a forensic URI. > > (e.g. fh=0, default; fh=1 header only) > > Any comments on this? > > Thank you, > > John > > > > _______________________________________________ > dmarc-discuss mailing list > [email protected] > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well terms > (http://www.dmarc.org/note_well.html) -- Vladimir Dubrovin @Mail.Ru
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
