‹ BackHN Continuity

Thread

How to set up SPF, DKIM, and DMARC for your sending domain

92 points · 31 comments · spy888

  1. adiabatichottub · · focus · HN ↗
    I recently tried bouncing mail during the header phase when DMARC didn't align, but it rejected more legit emails than SPAM. Most of the junk we've been getting passes DMARC and has an unsubscribe link.
    1. thayne · · focus · HN ↗
      DMARC doesn't really do much to prevent general spam. It prevents spoofing the from address, which provides some protection against phishing, but if the email is from the domain it claims to be, it can pass DMARC whether or not it is spam.
      1. adiabatichottub · · focus · HN ↗
        Indeed. Ultimately we're still relying on blacklists, Bayesian filters, and hueristics to detect actual SPAM.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.