DMARC
Domain-based Message Authentication, Reporting and Conformance: a DNS policy that requires mail to pass SPF or DKIM with a domain that aligns with the visible From address. The domain owner can ask receivers to monitor, quarantine or reject failing mail, and receives aggregate reports. Start at p=none, confirm every legitimate sender from the reports, then tighten the policy step by step.
Further reading: www.rfc-editor.org
From the Security Academy
SPF, DKIM and DMARC Deployment Guide: Stop Others Sending Mail as Your Domain
Inventory every sender, set up SPF and DKIM, move DMARC from none to reject in stages, lock down unused domains, and meet Gmail, Yahoo and Outlook.com rules.
15 min read ·
Phishing and Business Email Compromise (BEC): Spotting and Stopping It
Common phishing and BEC techniques, from credential theft and AiTM session hijacking to fake vendor bank changes, plus SPF/DKIM/DMARC and payment verification.
8 min read ·
Advisories that mention this term
No advisories mention this term yet.