Mailing lists and limitations
05Forwarding and message transformations can disrupt the authentication paths DMARC depends on.
This guide explains the 2015 publication. Superseded by RFC 9989, RFC 9990, RFC 9991.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 10.5 ↗
RFC 7489 · § 10.5EXAMPLE
3 / 3
03
Assess failure carefully
Use authentication evidence and receiver policy without treating every failure as proof of malice.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
Forwarding can break SPF; body/header modifications can break DKIM.
- Forwarding can break SPF; body/header modifications can break DKIM.
- Alignment prevents an unrelated domain’s pass from authenticating the visible From.
- DMARC does not detect every impersonation or lookalike-domain attack.
Examples are illustrative. Consult the linked RFC and its errata for implementation details.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy