What does this finding mean?
A broken signature chain can make the policy unavailable to validating resolvers.
DMARC result code
Invalid DMARC DNSSEC chain
dmarc.dnssec_bogus
What is the next step?
Check DS, DNSKEY and zone signatures with the DNS operator.
Please note: The result code describes a technical measurement, not a guarantee of delivery, security or legal compliance.
Content reviewed on 20.08.2026.