Forum Discussion
JeremyTBradshaw
Feb 05, 2021Steel Contributor
As of February 2021, does EOP/Microsoft now send DMARC aggregate reports?
I believe I have spotted evidence that the answer is yes. If you look at this answers.microsoft.com thread the answer states: TL;DR Office 365 currently does not send out any DMARC reports. If ...
- Feb 05, 2021
JeremyTBradshaw - Not yet Jeremy. You found the right User Voice however there is no ETA yet.
fleeman
Nov 08, 2022Copper Contributor
Arindam_ThokderI found the issue that is causing the Microsoft DMARC reports to fail RFC compliance about 1% of the time (https://www.uriports.com/blog/dmarc-reports-ietf-rfc-compliance/). Sometimes the reports have empty elements for domain and selector DKIM auth results.
RFC7489:
<xs:complexType name="DKIMAuthResultType">
<xs:all>
<!-- The "d=" parameter in the signature. -->
<xs:element name="domain" type="xs:string"
minOccurs="1"/>
<!-- The "s=" parameter in the signature. -->
<xs:element name="selector" type="xs:string"
minOccurs="0"/>
<!-- The DKIM verification result. -->
<xs:element name="result" type="DKIMResultType"
minOccurs="1"/>
<!-- Any extra information (e.g., from
Authentication-Results). -->
<xs:element name="human_result" type="xs:string"
minOccurs="0"/>
</xs:all>
</xs:complexType>
freddieleeman
Jan 08, 2023Brass Contributor
The_Exchange_Team Arindam_Thokder, I've located the source of this issue. The empty elements are added when an email is signed with an ed25519 DKIM signature.