Re: [dmarc-ietf] Reporting DMARC policy in A-R header fields

On Monday, July 29, 2019 3:50:34 PM EDT Дилян Палаузов wrote:
> Hello Scott,
> 
> You want to add the option to record the DMARC policy in the A-R header.  I
> add it as comment:
> 
> Authentication-Results: mail.example.org/x551xr2q019874; dmarc=pass
>  (p=quarantine dis=none) header.from=example.com; spf=pass
>  smtp.mailfrom=uuuu@example.com
> 
> with dis being the disposition.
> 
> What will a downstream processor do with the information?

It would execute the policy (e.g. reject or quarantine).  I would rather 
enforce reject in the MTA and leave quarantine to the MDA since that's just a 
question of which folder the mail lands in, not really an MTA function.  If 
you don't do all the policy enforcement in the MTA, then there needs to be 
some way to record it.

Scott K

> On Mon, 2019-07-29 at 15:37 -0400, Scott Kitterman wrote:
> > I'd like to add the option to record DMARC results in an A-R header field
> > for consumption by a downstream processor.  I think it would be something
> > like this:
> > 
> > Authentication-Results: mail-router.example.net; dmarc=pass
> > header.from=example.com policy.dmarc=none
> > 
> > That would take adding an entry in the Email Authentication Methods
> > registry for:
> > 
> > method: dmarc
> > ptype: policy
> > value: dmarc
> > 
> > Does that make sense as a way to do it?  Does anyone have alternative
> > suggestions?
> > 
> > Scott K
> 
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc