4. Reporting Format Update

このページは RFC 9991 の該当節を要約し, ARF fields, ABNF, MIME example, privacy/security details を保持します.

The reporting format update, including ARF header fields and ABNF for Identity-Alignment, is preserved below.

4.  Reporting Format Update

   Operators implementing this specification also implement an augmented
   version of failure reporting described in [RFC6591] as follows:

   1.  A DMARC failure report includes the following Abuse Reporting
       Format (ARF) header fields, with the indicated normative
       requirement levels:

       *  Identity-Alignment (REQUIRED; defined below)

       *  Delivery-Result (OPTIONAL)

       *  DKIM-Domain, DKIM-Identity, DKIM-Selector (REQUIRED for DKIM
          failures of an aligned identifier)

       *  DKIM-Canonicalized-Header, DKIM-Canonicalized-Body (OPTIONAL
          if reporting a DKIM failure)

       *  SPF-DNS (REQUIRED for SPF failure of an aligned identifier)

   2.  The Identity-Alignment field is defined to contain a comma-
       separated list of authentication mechanism names that failed to
       authenticate an aligned identity or the keyword "none" if all of
       the attempted methods were successful at authenticating an
       aligned identity.  Here is the ABNF [RFC5234] (importing comments
       and/or folding white space (CFWS) from [RFC5322]):

      id-align     = "Identity-Alignment:" [CFWS]
                       ( "none" /
                         dmarc-method
                           *( [CFWS] "," [CFWS] dmarc-method ) )
                       [CFWS]

      dmarc-method = ( "dkim" / "spf" )
                       ; each may appear at most once in an id-align

   3.  Authentication Failure Type "dmarc" is defined for the Auth-
       Failure field, which is to be used when a failure report is
       generated because some or all of the authentication mechanisms
       failed to produce aligned identifiers.  Note that a failure
       report generator MAY also independently produce an ARF message
       for any or all of the underlying authentication methods.