DMARC

DMARC ties SPF and DKIM to the domain people see in the From address. A message passes DMARC when SPF or DKIM passes for that domain. The DMARC record, at _dmarc.example.com, also tells receivers what to do with failing mail and where to send reports.

Policy

1. p=none: monitor only. Delivery does not change.
2. p=quarantine: failing mail may go to spam.
3. p=reject: failing mail may be refused.

Move to a stronger policy only once every service you use passes. Mailglo's readiness check lists services that would still fail.

Reports

The rua= tag lists where daily aggregate reports go. Mailglo adds its own address beside any you already use.

The ruf= tag lists where failure reports go: one report about one failing message, from receivers that send them. Mailglo keeps any recipients already there and adds its own only when you choose it in a DMARC change. It keeps a few details of each failing message, never its content. Connect DMARC reports explains what it keeps.

What DMARC does not tell you

A passing result means receivers authenticated the message. It does not guarantee inbox placement.