{"draft":"draft-kucherawy-dmarc-base-12","doc_id":"RFC7489","title":"Domain-based Message Authentication, Reporting, and Conformance (DMARC)","authors":["M. Kucherawy, Ed.","E. Zwicky, Ed."],"format":["ASCII","HTML"],"page_count":"73","pub_status":"INFORMATIONAL","status":"INFORMATIONAL","source":"INDEPENDENT","abstract":"Domain-based Message Authentication, Reporting, and Conformance\r\n(DMARC) is a scalable mechanism by which a mail-originating\r\norganization can express domain-level policies and preferences for\r\nmessage validation, disposition, and reporting, that a mail-receiving\r\norganization can use to improve mail handling.\r\n\r\nOriginators of Internet Mail need to be able to associate reliable\r\nand authenticated domain identifiers with messages, communicate\r\npolicies about messages that use those identifiers, and report about\r\nmail using those identifiers. These abilities have several benefits:\r\nReceivers can provide feedback to Domain Owners about the use of\r\ntheir domains; this feedback can provide valuable insight about the\r\nmanagement of internal operations and the presence of external domain\r\nname abuse.\r\n\r\nDMARC does not produce or encourage elevated delivery privilege of\r\nauthenticated email. DMARC is a mechanism for policy distribution\r\nthat enables increasingly strict handling of messages that fail\r\nauthentication checks, ranging from no action, through altered\r\ndelivery, up to message rejection.","pub_date":"March 2015","keywords":["domain","email","security","messaging","dkim","spf","authentication","reporting","conformance"],"obsoletes":[],"obsoleted_by":[],"updates":[],"updated_by":["RFC8553","RFC8616"],"see_also":[],"doi":"10.17487\/RFC7489","errata_url":"https:\/\/www.rfc-editor.org\/errata\/rfc7489"}