OKDMARC

DMARC

28 July, 2020

DMARC Reports

As we saw in the previous section the reports can be two different types: aggregated and forensics. Those reports help you ensure that you are properly authenticating your outbound emails. You can check out the difference between both of them below.

Aggregate Reports

They are XML documents showing data about the messages received that claimed to be from a particular domain. Those reports are meant to be machine-readable.

Forensic reports

These are individual copies of messages which failed authentication, each enclosed in a full email message using a special format called AFRF. Those reports are easily read by a person too. The information that those reports could contain is:

Subject line
Time when the message was received
IP information
Authentication results
- SPF result
- DKIM result
- DMARC result
From domain information
- From address
- Mail from address
- DKIM from address
Message ID
URLs
Delivery result
What was the applied policy, the message could be rejected if there’s a reject policy in place, or quarantined, or delivered because of a none policy
ISP information

Now we know how a DMARC works, how it looks, and what information it provides. We’re pretty certain you already know how useful this could be for you. But let’s see all advantages in the next section.