Hello folks,

There's an open ticket (https://trac.ietf.org/trac/dmarc/ticket/40) noting that 
we should clarify what constitutes valid data in a report. For example, the 
report cannot state that DMARC-DKIM was a "pass" when DKIM itself was a 
failure.  See the original thread here:

https://mailarchive.ietf.org/arch/msg/dmarc/Ii_dLXFzBNnRP361F922ty789I8/

It seems like the gist is that within the report it should never happen that 
DKIM or SPF are noted to have passed in the context of DMARC if they have not 
passed on their own.  It should also be properly noted by the reporter if they 
override with local policy.  Not by overriding the SPF/DKIM failures (and 
showing them as incorrectly passing), but instead by noting that local policy 
overrides properly (regardless of whether that override is higher or lower).

Does that seem properly summarized?

--
Alex Brotman
Sr. Engineer, Anti-Abuse & Messaging Policy
Comcast

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to