In article <vi1pr01mb70538541d7ade18a555b05d6c7...@vi1pr01mb7053.eurprd01.prod.exchangelabs.com> you write: >Aggregate feedback reports are essential for the proper implementation and >operation of DMARC. Domain Owners can choose to >exclusively direct reports to a processor external to their organization. In >such cases, the content of the reports are never >sent directly to the Domain Owner.
That is OK but I would also want to point out that the data are aggregated and contain no individual e-mail addresses of senders or recipients, nor IP addresses of individuals nor any contents of messages, so it is unlikely that they contain any PII. I have to say it seems weird to me that it's OK to send whatever to external places but not to your own staff. R's, John _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
