On 17.10.2024 at 19:43 L. Mark Stone via mailop <mailop@mailop.org> wrote:
> Back in May at the InboxExpo conference in Atlanta, I was told by a
> consultant to very large senders that they advise customers to set their
> DMARC to "p=quarantine" because they had been observing that Microsoft's
> processing of some emails was causing DKIM failures - in as much as 30% of
> their customers' email campaigns traffic.
> We didn't discuss the technical details (other than Microsoft's processing
> altered the emails in such a way as to cause the DKIM fails), but thought
> that might be helpful to share (possibly related?) as regards the OP's issue
> with Mimecast, with whom we had numerous difficulties, and whose Partnership
> we elected not to renew a while back.
I cannot confirm 30%, but when I grep Microsoft DMARC reports for temperror,
there are hundreds of hits. Nevertheless I don't see why you should change your
policy because one recipients is unable to reliably operate a DNS client.
Two records from the same DMARC report from the same day:
<record>
<row>
<source_ip>194.127.216.50</source_ip>
<count>34</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<envelope_to>hotmail.com</envelope_to>
<envelope_from>dm-jobs.com</envelope_from>
<header_from>dm-jobs.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>dm-jobs.com</domain>
<selector>dmglobal4</selector>
<result>pass</result>
</dkim>
<spf>
<domain>dm-jobs.com</domain>
<scope>mfrom</scope>
<result>pass</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>194.127.216.50</source_ip>
<count>5</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<envelope_to>hotmail.com</envelope_to>
<envelope_from>dm-jobs.com</envelope_from>
<header_from>dm-jobs.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>dm-jobs.com</domain>
<selector>dmglobal4</selector>
<result>temperror</result>
</dkim>
<spf>
<domain>dm-jobs.com</domain>
<scope>mfrom</scope>
<result>pass</result>
</spf>
</auth_results>
</record>
--
BR Oliver
________________________________
dmTECH GmbH
Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232 Karlsruhe
Telefon 0721 5592-2500 Telefax 0721 5592-2777
dmt...@dm.de<mailto:dmt...@dm.de> * www.dmTECH.de<http://www.dmtech.de>
GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
Geschäftsführer: Christoph Werner, Martin Dallmeier, Roman Melcher
________________________________
Datenschutzrechtliche Informationen
Wenn Sie mit uns in Kontakt treten, beispielsweise wenn Sie an unser
ServiceCenter Fragen haben, bei uns einkaufen oder unser dialogicum in
Karlsruhe besuchen, mit uns in einer geschäftlichen Verbindung stehen oder sich
bei uns bewerben, verarbeiten wir personenbezogene Daten. Informationen unter
anderem zu den konkreten Datenverarbeitungen, Löschfristen, Ihren Rechten sowie
die Kontaktdaten unserer Datenschutzbeauftragten finden Sie
hier<https://www.dm.de/datenschutzerklaerung-kommunikation-mit-externen-493832>.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
