Visual RFC.
ALL RFCs / RFC 9991
Read the RFC ↗
RFC 9991 / CURRENT DMARC

External failure recipients

03

External ruf destinations use the aggregate specification’s destination-verification procedure with the failure-report tag.

Related RFCs and changes

“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.

DIAGRAM§ 5 ↗
RFC 9991 · § 5EXAMPLE
3 / 3
External failure recipientsExternal ruf destinations use the aggregate specification’s destination-verification procedure with the failure-report tag.External failure recipientsruf: mailto:diagnostics@external.exampleverify external recipientNo authorization → no report delivery
03
Stop unauthorized delivery

Do not send to an external recipient that has not authorized it.

Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
KEY POINT

Use RFC 9990 §4 with ruf substituted for rua.

  • Use RFC 9990 §4 with ruf substituted for rua.
  • An external recipient must authorize reports.
  • This prevents arbitrary domains from forcing sensitive reports onto an unwilling destination.
DETAILS

Examples are illustrative. Read the exact policy, reporting, and privacy rules in the linked current specification.

Read the RFC section ↗

Diagrams simplify the RFC. Read the linked sections for complete requirements.

Privacy
All chapters in this RFC
  1. An individual failure report
  2. Structured ARF fields
  3. External failure recipients
  4. Minimize sensitive evidence
  5. Abuse and recipient controls

Drawing view

Scroll the drawing to see every part. Playback controls stay above it.

RFC 9700 / CHAPTERS

Chapters

For full details, tables, algorithms, and exceptions, read the original RFC.

RFC status and corrections ↗