A while back there was a request for reports on nits pertaining to the specification.

Here is one which I've circulated briefly to some folks recently in person, but I'm not sure how well received it will be here, as a plausible inclusion in the spec.

The suggestion: provide guidelines on data integrity, which data providers should follow.
Examples:
- raw SPF 'fail' should never result in DMARC-SPF 'pass'
- raw SPF 'pass' out of alignment with header_from should never result in DMARC-SPF 'pass'
- raw DKIM not being shown should never result in DMARC-DKIM 'pass'
etc

I'm not saying that these situations don't occur for legitimate reasons, but the DMARC result is a logical evaluation. If the result of that evaluation is other than the receiving system wants to apply, then all of the correct evaluations should still be listed, but the disposition can change, and local_policy explain.

Is this something which can be simply stated in the specification, or would it belong solely in a 'DMARC XML generator BCP' document?


--Tomki

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to