4. 报告格式更新

实现本规范的运营者还实现 [RFC6591] 中所述失败报告的增强版本, 如下所示.

1. DMARC 失败报告包含以下 Abuse Reporting Format (ARF) 头字段, 并带有所示规范性要求级别:

   • Identity-Alignment (REQUIRED; defined below)

   • Delivery-Result (OPTIONAL)

   • DKIM-Domain, DKIM-Identity, DKIM-Selector (REQUIRED for DKIM failures of an aligned identifier)

   • DKIM-Canonicalized-Header, DKIM-Canonicalized-Body (OPTIONAL if reporting a DKIM failure)

   • SPF-DNS (REQUIRED for SPF failure of an aligned identifier)

2. Identity-Alignment 字段定义为包含一个以逗号分隔的认证机制名称列表, 这些机制未能认证对齐身份; 如果所有尝试的方法都成功认证了对齐身份, 则该字段包含关键字 "none". 以下是 ABNF [RFC5234], 其中从 [RFC5322] 导入注释和/或折叠空白 (CFWS):

      id-align     = "Identity-Alignment:" [CFWS]
                       ( "none" /
                         dmarc-method
                           *( [CFWS] "," [CFWS] dmarc-method ) )
                       [CFWS]

      dmarc-method = ( "dkim" / "spf" )
                       ; each may appear at most once in an id-align

3. 为 Auth-Failure 字段定义 Authentication Failure Type "dmarc". 当某些或所有认证机制未能产生对齐标识符而生成失败报告时, 使用该类型. 注意, 失败报告生成器也可以针对任意或全部底层认证方法独立生成 ARF 消息.