Donate
‹ Back
Building Trust 2 October 2017

DMARC

What is DMARC?

Domain-based Message Authentication, Reporting & Conformance (DMARC) reduces the threat of deceptive emails. DMARC creates a feedback loop between legitimate email senders and receivers to make impersonation more difficult for phishers trying to send fraudulent email. DMARC standardizes how email receivers perform email authentication using the well-known SPF and DKIM mechanisms.
  • A multi-stakeholder effort to help provide domain owners enhanced brand security & integrity of the email channel.
  • Builds on lessons learned and the needs of brand owners and receiving networks.
  • Helps to address key deployment issues for of SPF and DKIM
  • Response to the need for scalable and effective policy mechanisms
  • Helps to combat phishing by tying visible Mail User Agent (MUA) “from” to DKIM or SPF authenticated domain

Domain Owners & Email Senders Benefits

  • Enhanced brand protection
  • Ability to communicate to receiving networks and ISPs what to do with illegitimate email
  • Feedback loop to improve and monitor their authentication infrastructure
  • Visibility on both the abuse of their domain and to optimize authentication across all domains and subdomains

Receiving Networks & ISPs Benefits

  • Clarity for handling of un-authenticated & failing email
  • A uniform and scalable way to determine email legitimacy
  • Freedom to act on email with confidence – no more guessing
  • Scalable methods to provide feedback to Domain Owners

End User Benefits

  • Greater confidence of the email channel
  • Significant reduction in risk of phishing from DMARC domains

Resources

‹ Back

Related articles

2014 Email Integrity Audit
Building Trust6 August 2014

2014 Email Integrity Audit

Best Practices to Enhance Trust & Fight Malicious & Deceptive Email

Best Practices: Email Authentication - SPF, DKIM, and DMARC
Building Trust2 October 2017

Best Practices: Email Authentication – SPF, DKIM, and DMARC

Email security, authentication, and related best practices are the foundation of the Internet Society's Online Trust Alliance work to promote...

2019 Online Trust Audit Methodology 
Privacy24 September 2019

2019 Online Trust Audit Methodology 

The 2019 Online Trust Audit will represent the 11th independent analysis and benchmark report of the adoption of security standards and responsible privacy...

Join the conversation with Internet Society members around the world