Ruvalin

Definition

DMARC aggregate report

A DMARC aggregate report is a compressed XML file that a mailbox provider sends once a day to the address given in the rua tag, summarising how many messages it received in your domain's name, from which IP addresses, and which of them passed SPF and DKIM.

The report contains no message content and no recipient addresses: only counters by source. That is what makes it straightforward to process under the GDPR, and also what makes it unreadable to a human by eye.

It is the instrument of the rollout. During the first weeks at p=none it is used to build the complete list of services legitimately sending in your name, mailboxes, invoicing, newsletters, booking tools, before the policy is tightened. Moving to p=reject without having read these reports is blocking blind.

Also known as
aggregate report, rua, DMARC report, RUA report
Standard
RFC 7489, appendix C

See also

In the guides

The whole glossary

CallBook