TLSRPT Report Generation

KumoCorp / kumomta

The first Open-Source high-performance MTA developed from the ground-up for high-volume email sending environments.

https://kumomta.com

Apache License 2.0

203 stars 25 forks source link

TLSRPT Report Generation #15

Open MHillyer opened 1 year ago

MHillyer commented 1 year ago

TLSRPT: https://datatracker.ietf.org/doc/html/rfc8460

wez commented 9 months ago

Reports sent via SMTP MUST contain a valid DomainKeys Identified Mail (DKIM) [RFC6376] signature by the reporting domain.
The DKIM TXT record SHOULD contain the appropriate service type declaration, "s=tlsrpt". If not present, the receiving system MAY ignore reports lacking that service type.

This implies that we need special configuration for generating, signing and sending these reports

wez commented 9 months ago

Reports need to be batched daily, but with a randomized delivery time; the randomization is prevent everyone sending all their reports at eg: midnight-UTC to the same place.

We'll need infrastructure to count problems per destination domain, and a nightly generation run to format the report, sign it and send it.

We'll also need configuration to specify the organization and dkim signing information.