> The fix is one DNS record.
Oh god the slop.
Only an LLM would describe DMARC as just "one DNS record".
I literally had to copy paste one dns record to enable it.
lol DMARC is one record.
It doesn't have to be just one record, but it doesn't have to be more than one record either.
DMARC is layered across (/is useless without) two other protocols (SPF, DKIM), both of which also require DNS records.. there's no way to DMARC with one record.. unless you're excluding those SPF and DKIM records in your count. You /could/ DMARC with two records: DMARC+SPF, or DMARK+DKIM but it's ill-advised - use all three. (Ignoring host hierarchy/cname delegation, you can have far more records)
Were you previously sending email without either DKIM or SPF?
Because i doubt that has worked at all in the last decade.
loading story #50419844
I suppose I'm splitting hairs.
Yes, a proper email authentication stack has DMARC + SPF + DKIM. But each of these is a separate protocol.
This also doesn't take into consideration the other protocols that have arisen BIMI, APRF, MTA-STS / TLS-RPT and are at even lower levels of adoption.
loading story #50418579
Do they literally just need the DMARC record to exist though, or do they need it to actually say something? Do you need DKIM? I found that SPF is very easy but DKIM is a royal pain.