Reading DMARC aggregate reports before tightening policy
The IETF's current DMARC documents describe policy evaluation and the reporting formats. Aggregate reporting is separate from failure reporting, and a report receiver may apply its own sampling, aggregation, and delivery behavior. Treat the data as evidence with scope and…