SPF and DMARC

noun · email authentication · element 81 of 117

DNS records that prove a domain's email is real: SPF lists the servers allowed to send, DMARC tells receivers what to do with mail that fails.

My levelAdvancedDeep production experience. I design systems with it and debug it fast.
Projects
2
Earliest project
2019
Family
Engineering

What is SPF and DMARC?

SPF (Sender Policy Framework) is a DNS record listing the servers allowed to send email for a domain. DKIM signs each message so it cannot be altered on the way. DMARC ties the two to the visible From address and tells receiving servers whether to accept, quarantine or reject mail that fails, and where to send reports.

Get them wrong in a migration and a company's mail goes to spam or disappears. Gmail and Yahoo have required them from bulk senders since 2024.

How I use SPF and DMARC

At TeamQ, SPF and DMARC were on the checklist for every site migration, next to DNS and Cloudflare, so client email kept landing after the move. For Global Preservation Strategies and Brook Capital I also looked after staff email.

Where I have used itSPF and DMARC by company and year, from the projects on this site and the rest of my career.
  1. Global Preservation Strategies1 project · 2019 to 20221 projectGlobal Preservation Strategies · 2019 to 2022
  2. Brook Capital Corporation1 project · 2020 to 20211 projectBrook Capital Corporation · 2020 to 2021
  3. TeamQ DevelopersMigrations · 2021 to 2025MigrationsTeamQ Developers · 2021 to 2025

Projects with SPF and DMARC

I use SPF and DMARC on every Email project, so those count here too.