Re: [dmarc-ietf] Two new fields in aggregate reports

[Seth Blank <[e-mail]>]

On Fri, Oct 25, 2019 at 10:49 AM John Levine <[e-mail]> wrote:

> As far as I know, the point of DMARC reports is to help domain owners
> understand who is sending mail that purports to be from them.  In a
> large organization it can be remarkably hard to track down every mail
> server in every department or every subcontractor that might be sending
> real mail with the domain in the From: header.
>
> The domain owners use the reports to do things like update SPF records
> to include all of the sending hosts, update server configs to add DKIM
> signatures, or to fix servers that are adding invalid signatures, and
> often to shut rogue servers down that shouldn't have been sending mail
> in the first place.
>
> I can't see how spam scores would be of any use for any of these tasks.
>

+1000

The point of DMARC reports is to understand what is not authenticating in
an aligned fashion, so that you can get those mailstreams authenticating
properly and verify things are now correct. Spam, nor insight into receiver
mechanisms to combat spam (which change daily, per Brandon), is out of
scope of DMARC reporting.

Seth

-- 

*Seth Blank* | Director, Industry Initiatives
*e:* [e-mail]
*p:* 415.273.8818



This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.