Start here

  • What DMARC is and what it does not do.
  • How to build and publish a DMARC record.
  • How aggregate reports are structured.
  • How SPF and DKIM alignment determines DMARC results.

Operate safely

  • Authorise an external report receiver.
  • Investigate why reports have not arrived.
  • Move from monitoring to quarantine or reject using evidence.