Skip to content
DDMARC
All posts
Tagged

best-practices

3 posts

  1. 01
    dmarc6 min read

    Subdomain DMARC: Why the sp= Tag Matters

    Does p=reject cover your subdomains? Usually, but one tag can silently undo it. How policy inheritance works and how to lock down dormant subdomains.

  2. 02
    dmarc4 min read

    Reading DMARC Aggregate Reports: the XML

    Aggregate reports show who is sending as your domain. How to read the XML, what each field means, and how to tell spoofing from a broken forwarder.

  3. 03
    dmarc6 min read

    DMARC Rollout Playbook: p=none to p=reject

    Moving from p=none to p=reject is where most DMARC projects stall. A staged, evidence-driven path to enforcement that won't block legitimate mail.