Browse Definitions :
Definition

Domain-based Message Authentication, Reporting and Conformance (DMARC)

Contributor(s): Matthew Haughn

Domain-based Message Authentication, Reporting and Conformance (DMARC) is an email authentication and reporting protocol designed to help ensure the authenticity of the sender’s identity.

DMARC protects email from spoofing, phishing and spamming. The protocol helps make certain that the listed sender is who they are supposed to be, making email users more secure and protecting brands against abuse of their images.

DMARC builds on the commonly-deployed Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) protocols. DMARC adds linkage to the author’s domain name with the :From: header and standardized policies for recipient handling of authentication failures. Receivers-to-sender reporting is improved for anti-spam purposes.

A policy for DMARC allows a sender domain to specify if its email’s use of SPF and/or DKIM. Policies can be set for sending email to a spam folder or reject it if the authentication methods fail. If an email recipient gets an email that fails these authentications, they also have an option to report it back to the sending domain.

DMARC only protects against direct domain spoofing. Users can still be fooled by similar domains that trick them by appearing close enough, e.g. domainname.com vs domaimename.com. The protocol also fails to protect against situations where the sender is faked as the same name as the recipient. Despite limitations, DMARC’s additional protections were welcomed. Within a year of its debut in 2012, DMARC was deployed on 60 percent of email inboxes.

This was last updated in November 2017

Continue Reading About Domain-based Message Authentication, Reporting and Conformance (DMARC)

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

  • Whistleblower Protection Act

    The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from ...

  • smart contract

    A smart contract, also known as a cryptocontract, is a computer program that directly controls the transfer of digital currencies...

  • risk map (risk heat map)

    A risk map, also known as a risk heat map, is a data visualization tool for communicating specific risks an organization faces. A...

SearchSecurity

  • buffer underflow

    Buffer underflow, also known as buffer underrun or buffer underwrite, is a threat to data that typically occurs when the ...

  • digital signature

    A digital signature is a mathematical technique used to validate the authenticity and integrity of a message, software or digital...

  • denial-of-service attack

    A denial-of-service attack is a security event that occurs when an attacker prevents legitimate users from accessing specific ...

SearchHealthIT

SearchDisasterRecovery

  • virtual disaster recovery

    Virtual disaster recovery is a type of DR that typically involves replication and allows a user to fail over to virtualized ...

  • tabletop exercise (TTX)

    A tabletop exercise (TTX) is a disaster preparedness activity that takes participants through the process of dealing with a ...

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a data center.

SearchStorage

  • secondary storage

    Secondary storage is storage for noncritical data that does not need to be frequently accessed.

  • Pure Storage

    Pure Storage is a provider of enterprise data flash storage solutions designed to substitute for electromechanical disk arrays.

  • yobibyte (YiB)

    A yobibyte (YiB) is a unit of measure used to describe data capacity as part of the binary system of measuring computing and ...

Close