Understanding DMARC
DMARC connects the visible sender domain to SPF or DKIM. A published DNS record alone does not prove that a message is correctly authenticated.
Read articleShort technical introductions lead directly to the relevant check. No invented studies, rankings or hidden results.
DMARC connects the visible sender domain to SPF or DKIM. A published DNS record alone does not prove that a message is correctly authenticated.
Read articleSPF permits specific IP addresses to send for a technical sender domain. Receiving servers and the visible sender address serve different purposes.
Read articleMX records describe a domain’s inbound mail path. They are neither an approved sender list nor proof of a working SMTP service.
Read articleMTA-STS publishes transport requirements for incoming email through DNS and HTTPS. Both parts must match the actual MX servers.
Read articleTLS-RPT requests aggregate reports about SMTP transport encryption. It provides observations from other mail providers and does not enforce encryption itself.
Read articleA correct policy today does not prevent later DNS, certificate, routing or sending-source changes. Continuous checks provide a history.
Understand monitoringEach permanent page explains a finding and its next step. Codes remain available independently of any domain result.
Start without signing in. History and alerting require a verified domain and an available account.