Forum Discussion
fleeman
Nov 08, 2022Copper Contributor
Re: As of February 2021, does EOP/Microsoft now send DMARC aggregate reports?
Arindam_ThokderI found the issue that is causing the Microsoft DMARC reports to fail RFC compliance about 1% of the time (https://www.uriports.com/blog/dmarc-reports-ietf-rfc-compliance/). Sometimes the reports have empty elements for domain and selector DKIM auth results.
RFC7489:
<xs:complexType name="DKIMAuthResultType">
<xs:all>
<!-- The "d=" parameter in the signature. -->
<xs:element name="domain" type="xs:string"
minOccurs="1"/>
<!-- The "s=" parameter in the signature. -->
<xs:element name="selector" type="xs:string"
minOccurs="0"/>
<!-- The DKIM verification result. -->
<xs:element name="result" type="DKIMResultType"
minOccurs="1"/>
<!-- Any extra information (e.g., from
Authentication-Results). -->
<xs:element name="human_result" type="xs:string"
minOccurs="0"/>
</xs:all>
</xs:complexType>
3 Replies
- freddieleemanBrass Contributor
The_Exchange_Team Arindam_Thokder, I've located the source of this issue. The empty elements are added when an email is signed with an ed25519 DKIM signature.
- MsdnUsrSince1994Copper Contributor
fleemanThat doesn't address the MIME conformance errors in my followup comment.
- fleemanCopper ContributorNo, it doesn't. I'm addressing an issue with the report itself.