DMARC rules have recently changed, so domain / DNS managers have had to make certain changes to abide by the new DMARC and DKIM rules. Here’s some background on this:
Recently, DMARC (Domain-based Message Authentication, Reporting, and Conformance) rules have undergone significant changes due to new requirements set by major email providers like Google, Yahoo, and Apple. These updates aim to enhance email security and reduce spam and phishing attempts.
Starting February 2024, Google started to require all senders to have email authentication measures in place, specifically SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail), alongside a DMARC policy. These measures ensure that emails come from legitimate sources and are not spoofed. Additionally, bulk senders (those sending more than 5,000 emails per day) must meet stricter requirements, including passing DMARC alignment and providing one-click unsubscribe options in their emails (Barrcuda Blog) (Proofpoint).
Yahoo has implemented similar requirements to reduce the influx of fraudulent and low-value emails. These changes aim to protect users from phishing attacks and improve overall email security (Nutshell).
These updates are a response to the increasing volume of sophisticated email-based cyberattacks and the need for more robust email authentication protocols. Organizations that haven't yet implemented these measures must do so promptly to comply with the new rules and ensure their emails are delivered to recipients (Proofpoint) (Nutshell).
For more information or assistance, please contact your domain / email manager. The manager can contact FORT directly if they need guidance.
Comments