What is a registry DMARC?
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a security protocol that helps domain owners to protect their brand against the unauthorized use, as the phishing or the counterfeit e-mails.
It works by combining the policies of authentication such as SPF, and DKIM to indicate to the mail servers if a message really comes from the domain that says represent it.
A record DMARC valid improves the confidence of your messages, it reduces the likelihood that your emails are marked as spam and gives you reports about possible attempts of impersonation.
Why is it important to have DMARC set up?
Keep a record DMARC helps:
Prevent fraud by e-mail, which will affect the reputation of your domain.
Increase the deliverability of your campaigns and notifications.
Get visibility into who is sending email on behalf of your domain.
Comply with security policies recommended by the major providers (Google, Microsoft, Yahoo, etc).
In a few words: DMARC protects your digital identity and strengthens the security of your communications.
How to interpret the results?
When you make a check, the system can show different types of results:
Log DMARC valid: Your domain is secured and configured correctly.
Log DMARC incomplete or with warnings: The record exists, but could be improved to increase the protection.
Without registration DMARC: Your domain does not have set a record DMARC, which leaves open the possibility of impersonation.
Each result includes details on the policy applied (p=none, quarantine, or reject), reports configured (rua and ruf), and other technical parameters.
Basic recommendations
Used a policy of rejection (p=reject) once you verify that all of your legitimate emails are authenticated.
Configures addresses reports (rua and ruf) to receive alerts about possible misuses.
Make sure you also have registrations valid SPF and DKIM.
Periodically check your reports DMARC to detect irregularities.
