SOLVED

Does Microsoft comply with the Reporting specification of DMARC RFC7489?

%3CLINGO-SUB%20id%3D%22lingo-sub-251667%22%20slang%3D%22en-US%22%3EDoes%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-251667%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20wondering%20specifically%20about%20sections%207.2%20(aggregate%20reports)%3CSPAN%3E%20and%207.3%20(Failure%20Reports).%20I%20have%20never%20received%20either%20at%20my%20RUA%2FRUF%20specified%20address%20from%20Microsoft%2C%20but%20I%20get%20them%20from%20all%20other%20major%20cloud%20mail%20providers.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-251667%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267266%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267266%22%20slang%3D%22en-US%22%3EPut%20in%203%20votes%20on%20it.%20I'll%20spread%20it%20on%20Twitter%20as%20well.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267265%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267265%22%20slang%3D%22en-US%22%3EI%20was%20not%20aware%20of%20this%2C%20thank%20you%20for%20bringing%20this%20up.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267214%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267214%22%20slang%3D%22en-US%22%3E%3CP%3EUpvote!%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Foffice365.uservoice.com%2Fforums%2F264636-general%2Fsuggestions%2F11094318-dmarc-aggregate-reports-from-o365-domains%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foffice365.uservoice.com%2Fforums%2F264636-general%2Fsuggestions%2F11094318-dmarc-aggregate-reports-from-o365-domains%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267211%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267211%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F126458%22%20target%3D%22_blank%22%3E%40Ben%20Bos%3C%2FA%3E%3C%2FP%3E%3CP%3EThanks%20for%20the%20links%20Sir.%20I%20will%20give%20them%20a%20read.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267014%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267014%22%20slang%3D%22en-US%22%3E%3CP%3EMicrosoft%20doesn't%20send%20DMarc%20reports%2C%20and%20it's%20not%20on%20the%20roadmap.%3C%2FP%3E%3CP%3ESome%20more%20information%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Ftzink%2F2017%2F10%2F21%2Fhow-we-got-to-enforce-dmarc-for-sub-domains-of-microsofts-largest-consumer-email-brands%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.msdn.microsoft.com%2Ftzink%2F2017%2F10%2F21%2Fhow-we-got-to-enforce-%3CSPAN%20class%3D%22highlight%22%3Edmarc%3C%2FSPAN%3E-for-sub-domains-of-microsofts-largest-consumer-email-brands%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fmsoffice_o365admin-mso_security-mso_o365b%2Fdmarc-reporting-when-office-365-is-sitting-behind%2Fb704db5d-451e-4157-833d-88664ed39d9b%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fmsoffice_o365admin-mso_security-mso_o365b%2F%3CSPAN%20class%3D%22highlight%22%3Edmarc%3C%2FSPAN%3E-reporting-when-office-365-is-sitting-behind%2Fb704db5d-451e-4157-833d-88664ed39d9b%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266491%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266491%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F211953%22%20target%3D%22_blank%22%3E%40Roberth%20Strand%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20a%20yes%20and%20no%20question.%20For%20one%20of%20the%20domains%2C%20we%20send%20to%20the%20same%20domain.%20For%20the%20other%2067%20we%20own%2C%20we%20send%20to%20the%20original%20domain%20also.%20Each%20of%20the%20domains%20does%20have%20an%20authorization%20record%20entry%20in%20the%20original%20domains%20DNS%20records.%20I%20will%20pm%20you%20the%20Domain%20Name%20and%20you%20can%20query%20the%20dmarc%20record%20via%20MXToolbox%20if%20you%20would%20like%20to%20inspect%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266487%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266487%22%20slang%3D%22en-US%22%3EAre%20you%20sending%20the%20reports%20to%20a%20different%20domain%3F%20If%20not%2C%20I%20would%20love%20to%20take%20a%20look%20at%20the%20dmarc-record%20you've%20set.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20are%20sending%20a%20report%20to%20a%20different%20domain%2C%20you%20would%20need%20to%20add%20an%20authorization%20record.%20Take%20a%20look%20at%20this%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdmarc.org%2F2015%2F08%2Freceiving-dmarc-reports-outside-your-domain%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdmarc.org%2F2015%2F08%2Freceiving-dmarc-reports-outside-your-domain%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Highlighted
Super Contributor

I am wondering specifically about sections 7.2 (aggregate reports) and 7.3 (Failure Reports). I have never received either at my RUA/RUF specified address from Microsoft, but I get them from all other major cloud mail providers. 

 

 

 

7 Replies
Highlighted
Are you sending the reports to a different domain? If not, I would love to take a look at the dmarc-record you've set.

If you are sending a report to a different domain, you would need to add an authorization record. Take a look at this:
https://dmarc.org/2015/08/receiving-dmarc-reports-outside-your-domain/
Highlighted

@Roberth Strand

 

This is a yes and no question. For one of the domains, we send to the same domain. For the other 67 we own, we send to the original domain also. Each of the domains does have an authorization record entry in the original domains DNS records. I will pm you the Domain Name and you can query the dmarc record via MXToolbox if you would like to inspect it.

Highlighted
Best Response confirmed by Robert Woods (Super Contributor)
Solution

@Ben Bos

Thanks for the links Sir. I will give them a read. 

Highlighted
I was not aware of this, thank you for bringing this up.
Highlighted
Put in 3 votes on it. I'll spread it on Twitter as well.