DMARC ruf — Forensic report address
Where per-message failure reports are sent.
- Required
- no
- Default
- —
- Valid values
comma-separated mailto: URIs
What it does
Forensic reports contain redacted copies of individual failing messages. Most large receivers — including Google — do not send them at all, for privacy reasons, so in practice ruf produces little traffic. When it does fire it can contain recipient data, so treat the destination mailbox as sensitive.
Example
v=DMARC1; p=reject; rua=mailto:dmarc@example.com; ruf=mailto:forensics@example.com