On Wed, Mar 19, 2025 at 6:09 AM Barry Leiba <[email protected]> wrote: > > I note that we are shutting down the DMARC working group without completing > the failure reporting document. We have discussed what to do about failure > reporting,but never made a decision. We need to decide now. > > I see three options: > > 1. Continue discussing the document, complete it, and ask Andy to AD-sponsor > it. > > 2. Abandon the document, leave failure reporting as it had been, and refer > people to the old (Informational) DMARC spec for documentation of it. > > 3. Abandon the document and deprecate failure reporting. That would involve > mentioning failure reports, noting that they have been seldom used and > problematic, and stating that their use going forward is not recommended. > > I recommend that we do (3), and call for objections to that path. If you > agree with (3), please note that here. If you prefer (1) or (2), please > state that and say why. If you see another reasonable option and prefer it, > please describe it. > > Please post your opinion by the end of March. > > I’ll note that options 2 and 3 require adjustments to the approved drafts, > and will need Andy’s review and approval for the changes.
My opinion is #3, that it would be best to deprecate failure reporting. RUF is already hobbled by too many ISPs being afraid of PII leaks so few send them, and I worry about them being a bit of a PII leak bomb from a DMARC record publisher's perspective if/when any big service were to have an authentication outage. In the past I found them useful when troubleshooting in deliverability-land, but I think that opportunity has dried up over time and we've lost the opportunity to do much with this even if we were to try to keep it alive on paper. Cheers, Al Iverson -- Al Iverson // 312-725-0130 // Chicago http://www.spamresource.com // Deliverability http://www.aliverson.com // All about me https://xnnd.com/calendar // Book my calendar _______________________________________________ dmarc mailing list -- [email protected] To unsubscribe send an email to [email protected]
