Engineering “DMARC for All:” Building User-First Accessibility
Building on our commitment to an Inclusive by Design philosophy, we have evolved the dmarcian portal from a standard security interface into a highly adaptable environment. For our engineering team, the mission of DMARC for All isn’t just a slogan—it’s a technical requirement that demands deep compliance and semantic precision.
Accessibility in a data-heavy field like DMARC isn’t about cosmetic changes; it’s about engineering the platform to meet the user where they are. Here is the technical breakdown of the tools we’ve built to achieve a new standard of deep WCAG 2.2 compliance.
The Foundation: Semantic Markup and WCAG Alignment
Our commitment starts at the code level, long before a user opens the accessibility menu. We believe that accessibility is baked in, not bolted on.
We prioritize semantic HTML5 markup to ensure that assistive technologies like screen readers can navigate our complex data tables and reporting sources natively. By using meaningful elements over generic div soup, we provide the structural integrity required by the Web Content Accessibility Guidelines (WCAG) 2.2. This ensures that every button, form field, and DMARC record is predictable and understandable.
Navigational Logic: The Tab Key and Focus Appearance
The cornerstone of a compliant web application is a logical, predictable focus order. We’ve meticulously audited our semantic HTML markup to ensure that navigating the platform via the Tab Key follows a natural flow through our reporting sources and configuration tools.
To support this, our Focus Appearance toggle allows users to drastically enhance the visual Focus Ring. By increasing the contrast and thickness of the outline around active elements, we provide a clear, unmistakable signpost for keyboard-only users, satisfying the most rigorous WCAG requirements for focus visibility.
Beyond Color: Pattern-Based Data Visualizations
In many security tools, Green means pass and Red means fail. However, deep compliance requires that information is not conveyed by color alone. To solve this, we’ve engineered a pattern-based strategy for our charts, indicators, and status badges.
By layering distinct geometric patterns and textures over our data visualizations, we ensure that users with any form of color vision deficiency can instantly differentiate between Aligned, Failed, and Inconsistent data. This ensures our reporting remains functional and informative, regardless of how a user perceives color.
Keyboard Autonomy: Custom Keybindings with Shift-Mod
Standard keyboard shortcuts can often conflict with the assistive software that users rely on. To address this, we engineered a Custom Keybinding Management System.
We have transitioned our modifier logic to utilize Shift-key combinations, providing a more consistent experience that avoids common conflicts with browser-level system commands. This tool allows users to remap or disable shortcuts entirely, ensuring they maintain full control over their navigational environment without “keyboard traps”.
Visual Lane-Tracking: Reading Masks and Guides
DMARC reporting involves dense rows of technical data. To assist users with dyslexia, ADHD, and other visual tracking challenges, we’ve implemented specialized reading aids:
- The Reading Guide: A horizontal bar that acts as a “straight-edge” to help eyes track a single row across the screen.
- The Reading Mask: A focus window that dims the peripheral content, highlighting only the specific line of data currently under review. These tools use zero-latency coordinate tracking to reduce cognitive load and visual noise, allowing users to focus on what matters.
Movement and Scale: Big Cursor and Oversized Widget
For users with motor impairments or low vision, precision is a challenge. Our Big Cursor mode swaps the standard pointer for a high-contrast, enlarged version to ensure it is never lost against the white space of a complex dashboard.
Furthermore, we’ve implemented a targeted Oversized Widget specifically for the Accessibility Center itself. We recognize that the gateway to accessibility tools must be the most accessible part of the site. By scaling up the center’s user interface, we ensure that users can easily configure their environment without struggling to find the settings first.
Eliminating Cognitive Barriers: The DMARC Dictionary
Deep compliance also means ensuring content is understandable. DMARC is a field of acronyms—SPF, DKIM, RUA, RUF. To bridge this gap, we’ve built an integrated DMARC Dictionary that matches the publicly-accessible index.
- Searchable Glossary: Instant access to plain-language definitions of technical terms.
- Alphabetical Scroll-Spy: An interactive navigation system that helps users maintain their spatial orientation within the dictionary while scrolling.
Our Commitment: The Accessibility Statement
True compliance is transparent. Our Accessibility Statement serves as our public accountability log. It details our ongoing efforts to achieve and maintain WCAG 2.2 standards, our rigorous testing methodologies (including both automated tools and manual screen-reader audits), and our direct line for user feedback.
Sophisticated Testing, Real-World Results
Compliance isn’t left to chance. Our implementation undergoes a battery of tests using sophisticated tools to ensure we meet—and exceed—global standards.
- Automated Audits: We integrate specialized accessibility linters and scanning tools into our development pipeline.
- Manual Rigor: We manually test keyboard focus flows and screen reader navigation to catch the nuances that automated tools miss.
- Component Logic Tests: We write dedicated unit tests for every accessibility toggle to ensure that preferences like Color Blindness or Oversized Widgets persist perfectly across sessions.
Engineering “DMARC for All”
By prioritizing semantic markup and deep compliance, we are removing the technical barriers that have traditionally made security data exclusionary. At dmarcian, we aren’t just checking a box; we are engineering a platform where everyone has the tools to secure the world’s email.
How to reduce phishing risks
Phishing persists not because it is unsolvable, but because we are not applying controls consistently at scale. The opportunity to mitigate phishing is not just about better detection or additional tooling but in making proven controls more accessible, more consistent, and more widely adopted. This includes routinely adopting foundational measures for email authentication with protocols like DMARC, which are often underutilized. When we do this we can remove one of the most persistent threats from the ecosystem.
Until that changes, phishing does not need to evolve, it just needs to wait.
If you’re interested in learning more about EMEA DMARC adoption, starting a commitment-free trial, or connecting with us, you can contact us at [email protected]. We would be happy to hear from you.
Want to continue the conversation? Head over to the dmarcian Forum.
