RFC 9990 - Domain-Based Message Authentication, Reporting, and Conformance (DMARC) Aggregate Reporting

• Status: Proposed Standard
• Published: May 2026
• Stream: IETF
• Obsoletes: RFC 7489

Abstract

DMARC allows Domain Owners to request aggregate XML reports from receivers. Reports are submitted to destinations declared in DMARC DNS records. This document obsoletes RFC 7489.

DMARC Document Set

• RFC 9989 - DMARC
• RFC 9990 - DMARC Aggregate Reporting
• RFC 9991 - DMARC Failure Reporting
• RFC 7489 - Original DMARC specification

Contents

• 1. Introduction
• 2. Document Status
• 3. DMARC Feedback
• 3.1. Aggregate Reports
• 3.5. Report Delivery
• 4. Verifying External Destinations
• 5. Extensible Reporting
• 6. IANA Considerations
• 7. Privacy Considerations
• 8. Security Considerations
• 9. Operational Considerations
• 10. References
• Appendix A. DMARC XML Schema
• Appendix B. Sample Report
• Appendix C. Differences from RFC 7489
• Acknowledgements and Author's Address

Related Resources

• Official Text: RFC 9990
• Official Page: RFC 9990 DataTracker
• Errata: RFC Editor Errata