We analyzed DMARC report emails from the last 3 days across nearly 3,500 reporting organisations. Looking only at organisations that sent a substantial volume of reports during that period, just 9 were fully RFC compliant (GMX, WEB.DE & mail.com), while most major reporting organisations had at least one compliance issue.

The most common problems were surprisingly basic: missing required fields like "version", "envelope_from", and SPF "scope", invalid attachment filenames and media types, empty "<sp/>" elements, and invalid values like "sampled_out", "unknown", "hardfail", and even "Pass" with a capital P.

Some large providers scored well but still had edge case issues. Comcast, Microsoft, and Fastmail were close, but not perfect.

Others performed far worse. Yahoo, Google, Amazon SES, and Mimecast all generated large volumes of non-compliant reports.

At DMARC scale, small XML mistakes create real interoperability problems. They break parsers, cause data loss, and force receiving platforms to build endless workarounds.

We’ve already contacted several organisations and shared examples of the issues we found. The goal is better interoperability across the email ecosystem. Until then, DMARC platforms like URIports will keep doing their unofficial second job: translating creative interpretations of the RFC into something that actually parses 😄

More details: https://www.uriports.com/blog/dmarc-reports-ietf-rfc-compliance/

#DMARC #EmailSecurity #EmailAuthentication #SPF #DKIM #CyberSecurity #RFC7489 #URIports

The new BIMI lps= tag, also known as the local-part selector, has been added to the BIMI specification. It allows domain owners to define different brand indicators based on the sender address (for example noreply@, support@, marketing@), without relying solely on the selector header.

With lps=, brands can assign unique BIMI logos to different sender types, exclude certain local-parts from showing any logo at all, and gain far more control over how their brand appears in recipients’ inboxes.

https://www.uriports.com/blog/bimi-lps-tag/

#BIMI #EmailAuthentication #DMARC #BrandProtection #URIports #EmailSecurity

Ever wonder what email servers are doing behind the scenes? At https://LearnDMARC.com, we turned the confusing world of email authentication into a visual story.

📡 Watch servers talk it out.
🎯 Take the DMARC quiz.
📬 Paste email headers.

Perfect for learners, IT pros, and anyone who’s ever yelled “WHY is SPF failing?!” Best of all? It’s free, and your data isn’t stored or used for anything beyond creating the visualization.

#EmailSecurity #DMARC #LearnDMARC #EmailAuthentication #SPF #DKIM #URIports