<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 12pt; font-family: Verdana,Geneva,sans-serif'>
<p id="v1reply-intro">On 21/11/2023 20:08, Matus UHLAR - fantomas wrote:</p>
<blockquote style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0;">
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"><br /><span style="white-space: nowrap;">On 21.11.23 12:06, Noel Butler wrote:</span>
<blockquote style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0;"><span style="white-space: nowrap;">This also depends on how you set DKIM's canonicalization</span></blockquote>
<br /><span style="white-space: nowrap;">this is a (known) problem of DKIM and playing with DMARC will not solve it.</span><br /><br />
<blockquote style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0;">Anyone using simple/simple should have a DKIM fail and plenty use that setting, prior to July this year - when I was using this address on file with Federal Law Enforcement agencies for receiving shall we say certain formal requests ;) I used fully strict with simple/simple - as earlier posts on this list would show</blockquote>
<br /><span style="white-space: nowrap;">I agree that DKIM designers messed this up quite much.</span><br /><span style="white-space: nowrap;">But again, we are here talking about DMARC.</span></div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"> </div>
</blockquote>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"> </div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;">But they are inter-twined, DMARC just does what DKIM and SPF declare, so any perceived DMARC issues *do* include DKIM and SPF</div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"> </div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"> </div>
<blockquote style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0;">
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"> </div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"> </div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"><br /><span style="white-space: nowrap;">I believe the issue lies in bad formulation of condition for fo:</span><br /><br /><span style="white-space: nowrap;"></span></div>
</blockquote>
<blockquote style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0;">
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"><br /><br />The problem I see is that with "fo=1" it should be reported, even if everything is okay.</div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"> </div>
</blockquote>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"> </div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;">Well, if there is a pass and a failure not "everything" is OK.</div>
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;">Of all DMARC notices I've had its because DKIM failed, and thankfully for me at least all of them are list based, its when I start seeing them for non list posts that I'll sit up and take notice.</div>
<blockquote style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0;">
<div class="v1pre" style="margin: 0; padding: 0; font-family: monospace;"><br /><br />Perhaps RFC 7489 needs clarification of what exactly needs to be reported and what not.<br /><br /><br /></div>
</blockquote>
<p>7489 makes fo=1|s|d clear, perhaps fo=0 could be worded differently, most of us, or perhaps just many of us, understand 0 means only if everything fails then send a report because thats how I see it and how it seemed to work when first ran DMARC until I moved fo=1 because I want to get failure reports - remember, not all failure reports go to humans ;)</p>
<p>Generally people who halve some idea of what they are doing don't bother with RFC's, perhaps the problem is with the software documentation as that's what they tend to go for.</p>
<p><br /></p>
<div id="signature">-- <br />
<p>Regards,<br />Noel Butler</p>
<p><br /></p>
</div>
</body></html>