DMARC Aggregate Reports from O365 Domains
Ability for Office 365 to send DMARC Aggregate reports when set in a monitoring policy to see which aouthorised\unauthorised senders are using my domain suffix... just like other vendors are already doing.
Jade
shared this idea
This is work we are planning to do although there is no ETA at this time.
98 comments
-
Anonymous
commented
As DMARC gains popularity 365 is becoming a a blackhole with respect to DMARC and this reflects badly on 365 customers. This does need to be addressed by Microsoft if the industry is tackle email misuse.
-
fbifido
commented
all Microsoft email domains, need SPF, DKIM, DMARC. MTA-STS, TLS-RPT, DANE
-
TimA
commented
From what I have heard, this worked until the migration of Hotmail into ExO
-
Jon Hilmar Edvardsen
commented
As you are (finally) implementing the IETF rfc7489 standard please respect it fully, so that you start treating Policy=Reject as Reject, and not as Personal User Quarantine, as is your current implementation.
-
Seb
commented
https://tools.ietf.org/html/rfc7489 is an open protocol. Sending reports to your own mailboxes only, breaks the protocol for all others. That, in my humble opinion, is theft!
-
Brian Geng
commented
I would like to add my voice to request Microsoft add DMARC reporting to their platform. It's shocking to me that they don't already have this in place.
-
Andrew W
commented
Microsoft would you hurry up? Email fraud has never been bigger and you are missing in action here at an otherwise very useful standard to help people and organisations protect their identities.
-
Ronald
commented
@Sean S: Is there any update to be given? A hint for a planned ETA possibly?
-
Wijbren de Vries / www.mailreport.eu
commented
Hope this is not for Microsoft 365 alone but also for the Outlook.com platform.
Both stopped reporting at the same time in the past. -
Ronald
commented
This is what i wrote a four months ago:
In a few day's, we're living in the year 2020. Phishing has never been as big a problem as it is now, and it will continue to grow. Microsoft, please put a number of people on this. We really, really need the visibility to go from p=quarantine to p=reject. We cannot do that without reporting from Office 365. Please do your part. Enable DMARC reporting!
-
Ronald
commented
This has been a serious issue for years now. Please, take this seriously and give us something of a plan.
Without DMARC reporting generated from Office 365 we're missing a huge amount of data/visibiltiy into what is passing and failing our DMARC records. and cannot really go to reject mode.
-
Sascha Reichhardt
commented
Please also add BIMI Logo Support
-
Anonymous
commented
we asked for this years ago, we have now moved to DMARC p=reject thanks to Proofpoint.... and we have now moved to Proofpoint On Demand for inbound outbound filtering so getting much better information for Email Fraud Defense.
-
Anonymous
commented
cmon Microsoft
-
William Rinehart
commented
Yes, this please.
-
Mark
commented
Trying to implement DMARC for our ticketing system and then eventualy push out to our clients. Hard to do when we don't get any sort of useful reoprting. 99% of our customer base are on 365 email platform. We need DMARC reporting!
-
Anonymous
commented
I'm baffled as well. As an industry leader and advocate, Microsoft should be sending these reports.
-
Stefan Schulte
commented
Baffled as all the commentators before me that this industry standard is missing at microsoft.
-
Tarun Arora
commented
Being one of the largest ESP, Microsoft should be sending DMARC Reports.
It's very crucial while implementing dmarc. -
HR
commented
Has to happen.