I run the the email for several domains and receive the domain reports on their behalf. Google is our email provider.
enterprise.protection.outlook.com, sends aggregate reports with an
envelope_to header, revealing to whom the email is being sent. This is none of my business, and it makes me uncomfortable seeing this information, since it appears that several small businesses are using Microsoft's services.
Long term, is this the new standard that this type of information is going to be released to administrators? Is there any way to request these reports do not contain this information?
I appreciate the utility of
dmarc, but it makes me less inclined to use the service.
<identifiers> <envelope_to>receiver.com</envelope_to> <envelope_from>sender.com</envelope_from> <header_from>sender.com</header_from> </identifiers>
It looks like there have been discussions in the past on the dmarc mailing list, with people expressing concerns similar to my own: