Does Microsoft comply with the Reporting specification of DMARC RFC7489?

[Robert Woods]

I am wondering specifically about sections 7.2 (aggregate reports) and 7.3 (Failure Reports). I have never received either at my RUA/RUF specified address from Microsoft, but I get them from all other major cloud mail providers. 

[#2]

Are you sending the reports to a different domain? If not, I would love to take a look at the dmarc-record you've set.

If you are sending a report to a different domain, you would need to add an authorization record. Take a look at this:
https://dmarc.org/2015/08/receiving-dmarc-reports-outside-your-domain/

[#3]

@Roberth Strand

This is a yes and no question. For one of the domains, we send to the same domain. For the other 67 we own, we send to the original domain also. Each of the domains does have an authorization record entry in the original domains DNS records. I will pm you the Domain Name and you can query the dmarc record via MXToolbox if you would like to inspect it.

[#4]

Microsoft doesn't send DMarc reports, and it's not on the roadmap.

Some more information:

https://blogs.msdn.microsoft.com/tzink/2017/10/21/how-we-got-to-enforce-dmarc-for-sub-domains-of-mic...

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_security-mso_o365b/dmarc-r...

[#5 · Accepted solution]

@Ben Bos

Thanks for the links Sir. I will give them a read. 

[#6]

Upvote!

https://office365.uservoice.com/forums/264636-general/suggestions/11094318-dmarc-aggregate-reports-f...

[#7]

I was not aware of this, thank you for bringing this up.

[#8]

Put in 3 votes on it. I'll spread it on Twitter as well.