We've put together a short video on our own DMARC deployment process: https://youtu.be/4jUcAvTMp0Y This video is part of a larger video series on all things DMARC. The transcript follows: (more…)
We've put together a short video on the benefits of deploying DMARC: https://youtu.be/2cZ18POTExM This video is part of a larger video series on all things DMARC. The transcript follows: (more…)
We've put together a short video on how DMARC works: https://youtu.be/XnZ4HH70UzE This video is part of a larger video series on all things DMARC. The transcript follows: (more…)
We've put together a short video that is an overview of DMARC: https://youtu.be/kGk-Af_92Bk This video is part of a larger video series on all things DMARC. The transcript follows: (more…)
DMARC introduces the concept of "Identifier Alignment" to the world of email. The concept is needed as SPF and DKIM are stand-alone technologies capable of associating a domain with a piece of email. When a receiver uses SPF, the receiver looks at the domain found in the RFC5321.MailFrom to figure out where to look for…
Yahoo is placing ymail.com and rocketmail.com into p=reject on November 2nd. This information is being provided to give people and companies time to prepare, as the #1 piece of feedback from when Yahoo moved yahoo.com to a p=reject was that Yahoo didn't let the Internet know about the move in advance. Hopefully, this announcement will…
People sometimes write in and ask "what is the impact of a broken SPF record"? The net effect of a broken SPF record is that receivers can't reliably use SPF to determine the legitimacy of the domain's email. *Some* receivers might ignore the broken parts of an SPF record and keep checking, but out of…
If PTR mechanisms are detected, the current diagnostic output is: Warning: PTR mechanisms SHOULD NOT be used and cannot be resolved using this diagnostic tool. What does the PTR mechanism mean? When an email receiver gets a piece of email and the PTR mechanism is in the sender's SPF record, the receiver will look at…
If you publish an SPF record and use the a mechanism, but your domain doesn't actually have an A record in place, then you'll see this warning. Here's a sample SPF record that contains the a mechanism (the a is in bold): v=spf1 a include:_spf.google.com ~all The A DNS record is how you use the…
Users sometimes ask What does "No DMARC reports received yet which confirm DKIM signing" mean? dmarcian uses DMARC-XML data to detect the presence of DKIM signatures. There is no straight-forward way to query the internet for the presence of DKIM signatures, and so dmarcian relies on the contents of DMARC-XML reports to provide information on…