DMARC
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication, policy and reporting protocol that provides a way for email senders and receivers to determine whether or not a given message is legitimately from the sender and what to do if it isn’t. It adds a layer of security for our email by protecting uwosh.edu against unauthorized use by phishers and spoofers.
Implementing DMARC for uwosh.edu
Campus email administrators are working towards implementing a DMARC policy that quarantines emails that are not DMARC aligned. While they are taking steps to minimize the impacts they simply do not have a good idea about who is sending, what we should trust or access to reconfigure the service that is sending. If you are sending mail using a service that is not listed as compliant below then please reach out for an email authenticity consultation.
It is critical we implement DMARC as Google, Yahoo and Apple are requiring it for high-volume senders beginning in February 2024. If we run afoul of these requirements Google, Yahoo and Apple may reject all messages sent from uwosh.edu.
How DMARC works
DMARC works to verify emails through two existing authentication standards, SPF and DKIM.
Messages are DMARC aligned if they pass SPF or DKIM checks and the domain in the From Header matches the results of SPF/DKIM. The email address in the From Header is what recipients see.
Approved and unapproved email services
Approved/Verified
UW Oshkosh Microsoft 365
Salesforce Marketing Cloud
Qualtrics
Amazon SES (IT managed)
Campus Listservs
Campus SMTP
Sending email using any other email service requires campus email administrator coordination to work with DMARC
Unapproved/Unverified
Third-party email services that are not configured to work with the new DMARC controls
Any vendor using off-campus servers
Non-UWO email accounts that send as a @uwosh.edu address
E.g. a hotmail.com or gmail.com address set to send as a uwosh.edu address
Third-party email services that don’t send email using on-campus mail services
Get help becoming DMARC compliant
Need help sending DMARC-protected email? Submit a request below for a one-on-one consultation.