Forum Discussion
Does Microsoft comply with the Reporting specification of DMARC RFC7489?
I am wondering specifically about sections 7.2 (aggregate reports) and 7.3 (Failure Reports). I have never received either at my RUA/RUF specified address from Microsoft, but I get them from all other major cloud mail providers.
Thanks for the links Sir. I will give them a read.
7 Replies
Microsoft doesn't send DMarc reports, and it's not on the roadmap.
Some more information:
https://blogs.msdn.microsoft.com/tzink/2017/10/21/how-we-got-to-enforce-dmarc-for-sub-domains-of-microsofts-largest-consumer-email-brands/-for-sub-domains-of-microsofts-largest-consumer-email-brands/
https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_security-mso_o365b/dmarc-reporting-when-office-365-is-sitting-behind/b704db5d-451e-4157-833d-88664ed39d9b-reporting-when-office-365-is-sitting-behind/b704db5d-451e-4157-833d-88664ed39d9b
- I was not aware of this, thank you for bringing this up.
Thanks for the links Sir. I will give them a read.
- Are you sending the reports to a different domain? If not, I would love to take a look at the dmarc-record you've set.
If you are sending a report to a different domain, you would need to add an authorization record. Take a look at this:
https://dmarc.org/2015/08/receiving-dmarc-reports-outside-your-domain/This is a yes and no question. For one of the domains, we send to the same domain. For the other 67 we own, we send to the original domain also. Each of the domains does have an authorization record entry in the original domains DNS records. I will pm you the Domain Name and you can query the dmarc record via MXToolbox if you would like to inspect it.
