Interpreting a DMARC report that seems to have conflicting data
Solution 1:
It is failing because the domain isn't aligned for DKIM.
The result in <policy_evaluated> is assessed as follows:
- Is the result in
<auth_results>pass? - Is the domain in
<auth_results>aligned? That is, is the domain in<auth_results>the same domain as in<policy_published>?
If the answers to 1 and 2 are Yes then the result is pass, otherwise it is fail.
In your case, for DKIM #1 is Yes, but #2 is No because the domain in <policy_published> is mydomain.io but the domain reported in the <auth_results> for DKIM is myotherdomain.net.