DMARC

DMARC ties SPF and DKIM to the domain people see in the From address. A message passes DMARC when SPF or DKIM passes for that domain. The DMARC record, at _dmarc.example.com, also tells receivers what to do with failing mail and where to send reports.

Policy

1. p=none: monitor only. Delivery does not change.
2. p=quarantine: failing mail may go to spam.
3. p=reject: failing mail may be refused.

Move to a stronger policy only once every service you use passes. SendBop's readiness check lists services that would still fail.

Reports

The rua= tag lists where daily aggregate reports go. SendBop adds its own address beside any you already use.

What DMARC does not tell you

A passing result means receivers authenticated the message. It does not guarantee inbox placement.