SPF allows sources to send. DMARC checks the visible domain alignment with SPF or DKIM and tells the recipient what to do if of failed….
In brief….DMARC and SPF are not alternatives. SPF is a mechanism of authentication; DMARC orchestra SPF and DKIM around the visible domain and, a policy….
Solution A….
DMARC
DMARC publishes a processing policy and can receive reports on messages using the domain….
Key points…
- Main policies: Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon,, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon, Mon,
- S, press SPF and/or DFIM….
- Adds the concept of alignment with the field From….
Solution B….
SPF
SPF defines the servers allowed to send for the domain used in the SMTP envelope…
Key points…
- List of sources in the DNS….
- Limit of DNS searches to be followed…
- Does not directly cover the visible domain after some distractions…
Comparative table….
| Criterion…. | DMARC | SPF |
|---|---|---|
| Role…. | Policy and alignment… | Authorization of sources…. |
| Dependence…. | SPF or DFIM…. | Independent but incomplete alone |
| Reports | Yes, if addresses configured | No |
| Action on failure | Observation, quarantine or rejection | Result pass, fam, softfail, etc. |
Choose DMARC if…
You have already configured SPF or DKIM and want to supervise and then reduce the visible domain usurpation.
Choose SPF if….
You start by declaring the servers and services allowed to send emails for your domain.
Key takeaways
DMARC and SPF are not alternatives. SPF is a mechanism of authentication; DMARC orchestra SPF and DKIM around the visible domain and, a policy….
Deepening the two notions….
← Back to all comparison…