DMARC

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication, policy and reporting protocol that provides a way for email senders and receivers to determine whether or not a given message is legitimately from the sender and what to do if it isn’t. It adds a layer of security for our email by protecting uwosh.edu against unauthorized use by phishers and spoofers.

Implementing DMARC for uwosh.edu

Campus email administrators are working towards implementing a DMARC policy that quarantines emails that are not DMARC aligned. While they are taking steps to minimize the impacts they simply do not have a good idea about who is sending, what we should trust or access to reconfigure the service that is sending. If you are sending mail using a service that is not listed as compliant below then please reach out for an email authenticity consultation.

It is critical we implement DMARC as Google, Yahoo and Apple are requiring it for high-volume senders beginning in February 2024. If we run afoul of these requirements Google, Yahoo and Apple may reject all messages sent from uwosh.edu.

How DMARC works

DMARC works to verify emails through two existing authentication standards, SPF and DKIM.

Messages are DMARC aligned if they pass SPF or DKIM checks and the domain in the From Header matches the results of SPF/DKIM. The email address in the From Header is what recipients see.

Approved and unapproved email services

Get help becoming DMARC compliant

Need help sending DMARC-protected email? Submit a request below for a one-on-one consultation.