DMARC

DMARC (Domain-based Message Authentication, Reporting & Conformance) is a security standard that helps protect email domains from exploitations such as phishing or spoofing.

What is DMARC?

Email verification: DMARC enables recipients to verify if an email truly comes from the specified domain. This happens by checking the SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail). With DMARC, the administrator of a domain can indicate from which sources an email may be sent (SPF), and each email has to be signed cryptographically (DKIM):

SPF: This is a list of authorised servers that can send emails on behalf of a domain.
DKIM: This uses a digital signature to confirm that an email has not been altered during its transport.

Moreover, DMARC provides domain owners with insight into which emails were sent from the domain, allowing them to recognize possible exploitation attempts. With this, domain owners are able to set policies for treating invalid emails (for instance marking them as spam, or blocking them entirely).

My domain uses DMARC, what now?

If you are using your own domain name, either your organisation's or your own, you can use Laposta by authenticating your domain.

Email addresses set up by the provider with DMARC, such as Gmail, Ziggo or Telenet, cannot be used as sender addresses in Laposta. You can read more about this here, and find an overview of all providers that have set up DMARC and have thus made it impossible to use their addresses as a sender address in our/a newsletter service.