Blogs
-
DMARC
Why DMARC Fails When SPF and DKIM Both Pass: Alignment Explained
SPF and DKIM can both pass but DMARC still fails. Here is why alignment is the missing piece.
-
DMARC
How to Move Your DMARC Policy from p=none to p=reject Without Breaking Legitimate Email
Switching from p=none to p=reject protects your domain from spoofing but risks breaking legitimate mail. This step-by-step guide covers prerequisites, monitoring setup, subdomain policies, and the gradual rollout that keeps your email flowing while hardening your domain.
-
DMARC
Why SPF, DKIM, and DMARC Exist as Separate Mechanisms
SPF, DKIM, and DMARC all authenticate email but they use different DNS record types and serve different purposes.
-
DMARC
What ARC on Cisco/Ironport Means for Enterprise Email Admins
Cisco/Ironport now supports ARC, an email authentication standard that preserves auth results through forwarding chains. Here is what that means for your DMARC setup.
-
DMARC
Why DMARC Fails When SPF and DKIM Both Pass: Alignment Explained
SPF and DKIM passing does not automatically mean DMARC passes. DMARC alignment is a separate requirement, and this explainer shows exactly why alignment failures happen and how to fix them.
-
DMARC
What Is ARC in Email Security? Cisco Ironport Just Added Support - Here Is What Changes
ARC (Authenticated Received Chain) preserves email authentication results when messages pass through mailing lists and forwarders. Cisco Ironport now supports it. Here is what changes for your DMARC setup.
-
DMARC
The emailauth.org GCA Root Certificate Is Expiring: What Practitioners Need to Know
The Global Cyber Alliance root certificate for emailauth.org is expiring in approximately 4-5 months. If you use GCA-provided DMARC reporting infrastructure, here is what the expiration means for your monitoring and what action to take before the deadline.
-
DMARC
Why DMARC Fails for Forwarded Emails (And What to Do About It)
Forwarded emails often fail DMARC even when SPF and DKIM both pass. Here is why it happens and what you can do about it.
-
DMARC
Why Does DMARC Fail When SPF and DKIM Both Pass?
SPF and DKIM both passed, but DMARC still failed. Here is why -- and it is not a contradiction. A plain explanation of the difference between email authentication and alignment.
-
Deliverability
Password Resets Do Not End an Active OWA Compromise -- Here Is What Actually Does
Changing an OWA or Exchange Online password does not log out active sessions. Here is what actually ends a compromise, step by step.