On March 14, 2023 7:41:47 PM UTC, Steven M Jones <[email protected]> wrote:
>On 3/12/23 07:50, John Levine wrote:
>> 
>> It also occurs to me that anyone who sends failure reports also sends
>> aggregate reports, so if you care, you have a way to find out.
>
>
>This made me wonder if everybody requesting failure reports also requests 
>aggregate reports, so I took a look at the data DomainTools shares with 
>DMARC.org.
>
>DMARC records that have RUF w/o RUA: 72,400+
>  - 50k+ are two-component, e.g. example.org; 11k+ three-component
>  - 28k are .com, 4.5 are .co, 4k are .nl, and 4.5k are .org or .net, etc
>
>This is from all observed, valid DMARC records still available from DNS at the 
>end of CY2022.
>
>While this is a small percentage of all valid DMARC records observed at that 
>point in time (about 0.1%), it is a much larger number than I would have 
>expected before I checked.

My expectation is that if you were able to contact the people who made that 
decision, they'd say they did it because they want information on DMARC 
failures, which is not what DMARC failure reports give you.  They provide 
details on messages which fail DMARC, not particularly about the DMARC failure.

The naming is a bit misleading, but I don't propose we change it.

Scott K

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to