Hi all,

A colleague of mine is setting up DMARC on his domain and would like to receive aggregated reports on an e-mail address that looks like <[email protected]>. Because of that, he stumbled upon an inconsistency in implementations of DMARC at the recipients’ ends, and I’m trying to figure out which implementations are correct or incorrect with respect to the parsing of mailto URIs in rua/ruf tags.

Reading RFC 7489, and noticing that the argument for a rua tag is a DMARC URI, he assumed that the + sign had to be percent-encoded, leading him to set up his DMARC like this: rua=mailto:me%[email protected].

To his surprise, he noticed that some ESPs send the reports to me%[email protected] (not percent-decoding the + sign), while others send the reports to [email protected], meaning that they did percent-decode the + character.

Hence my question: who is right? All "!", "," and ";" characters appearing in e-mail address local-parts must be encoded, that is clear enough from RFC 7489. But what about the other characters listed in gen-delims or sub-delims in RFC 3986? Must these characters be percent-encoded in ruf/rua tags, or must they stay unencoded?

Regards,
--
Marc van der Wal

_______________________________________________
dmarc mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to