Visual RFC.
ALL RFCs / RFC 9991
Read the RFC ↗
RFC 9991 / CURRENT DMARC

An individual failure report

01

A failure report concerns an individual message, unlike an aggregate traffic summary.

Related RFCs and changes

“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.

DIAGRAM§ 2 ↗
RFC 9991 · § 2EXAMPLE
3 / 3
An individual failure reportA failure report concerns an individual message, unlike an aggregate traffic summary.An individual failure reportOne message authentication failurediagnostic authentication evidencemessage context only if policy permitsGeneration may be limited or disabled
03
Choose whether to report

Apply reporting requests, operational limits, and privacy policy.

Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
WHAT CHANGED
RFC 7489DMARC failure reports

Failure reporting is separated from RFC 7489 into its own specification. It also updates RFC 6591’s reporting format and gives explicit privacy guidance for deployment.

Read the updated RFC section ↗
KEY POINT

Reports normally follow detection quickly rather than waiting for an aggregate interval.

  • Reports normally follow detection quickly rather than waiting for an aggregate interval.
  • Message headers or content can support diagnosis, subject to privacy policy.
  • A requested failure report is not guaranteed: operators may limit or disable generation.
DETAILS

Examples are illustrative. Read the exact policy, reporting, and privacy rules in the linked current specification.

Read the RFC section ↗

Diagrams simplify the RFC. Read the linked sections for complete requirements.

Privacy
All chapters in this RFC
  1. An individual failure report
  2. Structured ARF fields
  3. External failure recipients
  4. Minimize sensitive evidence
  5. Abuse and recipient controls
RFC 9700 / CHAPTERS

Chapters

For full details, tables, algorithms, and exceptions, read the original RFC.

RFC status and corrections ↗