Useful Presentations DMARC Overview (PDF) DMARC Anniversary Review (PDF)

DMARC Adoption in 1 Year Mailbox Providers: 60% of the world's email boxes are protected by DMARC, representing 1.976 billion accounts. 80% of typical US customers are now protected by DMARC. Senders: 50% of the top 20 sending domains publish a DMARC policy 60% of these domains publishing policy belong to companies not directly affiliated with DMARC.org 70% of those domains contain a policy directing receivers take action against unauthenticated messages.

DMARC Specification

• Current Version: (Submitted to the IETF on March 31, 2013)
  • Domain-based Message Authentication, Reporting and Conformance (DMARC)
  
  
• Previous Versions: (Historical Reference Only)
  • "draft-dmarc-base-00" rev.02 (Published on March 30, 2012)
  • "draft-dmarc-base-00" rev.01 (Published on December 16, 2011)

Related Specifications

Authentication Failure Reporting Format (AFRF)

• A new report sub-type extension for the Abuse Report Format (ARF) (see: RFC 5965)
• Allows for relaying of forensic details regarding an authentication failure
• Supports reporting of SPF and/or DKIM failures
• For SPF, reports the client IP address and the SPF record(s) that were retrieved, producing a "fail" result
• For DKIM, reports the canonicalized header and body that produced a failed signature, allowing forensic analysis by the signer to detect why the failure occurred
• Also supports ADSP reporting of messages that weren't signed but should have been
• This will be used by DMARC sites for reporting per-message failure details.
• An aggregate reporting format is suggested within an appendix of the DMARC specification.

DomainKeys Identified Mail (DKIM)

• DKIM provides a method for validating a domain name identity that is associated with a message through cryptographic authentication.
• DMARC uses DKIM results as one method (SPF being the other) for receivers to check email.
• More Information: DKIM.org

Sender Policy Framework (SPF)

• SPF provides a method for validating the envelope sender domain identity that is associated with a message through path-based authentication.
• DMARC uses SPF results as one method (DKIM being the other) for receivers to check email.
• More Information: OpenSPF.org