
The ARC Header: How Forwarding Breaks DMARC and What You Can Do
Forwarders break DMARC by modifying messages in transit. ARC (RFC 8617) preserves authentication results across hops. How it works, who supports it, and the limits.
Articles and tutorials on communication infrastructure.
61–69 of 69 articles

Forwarders break DMARC by modifying messages in transit. ARC (RFC 8617) preserves authentication results across hops. How it works, who supports it, and the limits.

Content rules decide far less than reputation, and they still reject mail on their own. What rule-based scoring measures, what Bayesian filters learn, and what to fix.

BIMI displays your logo in supporting inboxes. The VMC certificate costs $1,500/year. Whether the brand recognition lift justifies the spend honestly assessed.

Password resets going to spam? You're sending them from the same IP and domain as marketing campaigns. The four operational fixes that actually work.

Most IP warming schedules fail because they ignore engagement segmentation. The 30-day ramp that actually works volume tables, segment ordering, and recovery rules.

When to move from shared to dedicated IP pools. The volume threshold, reputation contamination risks, and the cost-benefit analysis ESPs don't want you to do.

How to move from DMARC p=none to p=reject without breaking production mail. The phased rollout that actually works with the failures most senders hit.

SPF authorises servers, DKIM authenticates messages. How the signing and verification cycle works, what each tag in the header does, and where signatures break.

Most SPF records are subtly broken. The 10-lookup limit, multiple records, +all, and the alignment trap what's actually wrong with your SPF setup.