Standard: DMARC record is set to either quarantine or reject

[aaronhans]

Reference: Standards

What standard do you recommend?

The DMARC record should both exist and be set to a value of quarantine or reject which will instruct receiving servers not to treat the received message as normal correspondence when the SPF or DKIM check is failed.

Name: DMARC record is set to either quarantine or reject
Link:
Guidance:
Indicator: Security

Why

This is a security check that helps secure outbound email. The DMARC DNS record instructs receiving servers to reject or quarantine messages received from this domain that violate either SPF or DKIM record checks.

The DMARC record can tell the receiving server to do nothing or it can instruct it to quarantine or reject the messages failing checks. We want to see that the dmarc record is set to these strict values of either quarantine or reject.

More info on the ticket https://github.com/ScanGov/auditor/issues/1

The audit info for this audit has been run and is included in the data repo in the experimental folder

Dev

(for ScanGov after review)

Update:

• Guidance: https://github.com/ScanGov/data/blob/main/standards/guidance.json
• Audits: https://github.com/ScanGov/data/blob/main/standards/audits.json
• Review: https://standards.scangov.org/