One Email, Three Identities: SPF, DKIM and DMARC Explained
- A single email carries three separate domain identities, plus the IP address it was actually delivered from, and nothing requires any of them to match.
- Most of the confusion around SPF, DKIM and DMARC comes from assuming there is one "sender" to check.
- There are three identities, they are checked by different mechanisms, and a message can pass DMARC while two of the three point in different directions.
Unverified
- A single email carries three separate domain identities, plus the IP address it was actually delivered from, and nothing requires any of them to match.
- Most of the confusion around SPF, DKIM and DMARC comes from assuming there is one "sender" to check.
- There are three identities, they are checked by different mechanisms, and a message can pass DMARC while two of the three point in different directions.
Sources: Senderledger