DMARC.org Domain-based Message Authentication, Reporting & Conformance
Questions
Technical questions and comments should be posted to the discussion list: Press inquiries should be sent to: General questions should be sent to:

About DMARC.org

A group of leading organizations came together in the spring of 2011 to collaborate on a method for combating fraudulent email at Internet-scale. The mission was two-fold:

  • Enable senders to publish policies easily discoverable policies on unauthenticated email
  • Enable receivers to provide authentication reporting to senders so that they can improve and monitor their authentication infrastructure

Their common goal was to develop an operational specification to be introduced to the IETF for standardization.

The founding contributors include:
  • Receivers: AOL, Comcast, GMail, Hotmail, Yahoo! Mail
  • Senders: American Greetings, Bank of America, Facebook, Fidelity, LinkedIn, Paypal
  • Intermediaries & Vendors: Agari, Cloudmark, eCert, ReturnPath, Trusted Domain Project

The concept behind DMARC was based on practical experience between loose collaborations between some of the members who agreed between them how to interpret mail coming from domains supporting DKIM and SPF. The result of the collaboration was the first draft of the specification that is now available for public review and comment prior to submitting it to the IETF for standardization.

Industry liaisons include: