Articles tagged Dns

Our blog shares expert insights on email security, DMARC configuration, and deliverability optimization.

DMARC aspf tag: what it does and when to change it
dmarc ·

DMARC aspf tag: what it does and when to change it

The aspf tag controls how strictly DMARC checks SPF alignment. Most people leave it at the default and that's usually fine. Here's when you might want to change it.

DT
DMARCTrust
6 min read
SPF failed: why it happens and how to fix it
spf ·

SPF failed: why it happens and how to fix it

SPF failures show up in your DMARC reports or email headers, but the reason is not always obvious. We break down the common causes of SPF failures and walk through practical troubleshooting steps.

DT
DMARCTrust
11 min read
A new DMARC tool to avoid copy-pasting records
dmarc ·

A new DMARC tool to avoid copy-pasting records

Copy-pasting DMARC records from forums is how domains end up with broken email authentication. Our free DMARC generator builds valid records with the exact tags you need, explained in plain English.

DT
DMARCTrust
4 min read
From p=none to p=reject: how to enable DMARC enforcement in 2026
security ·

From p=none to p=reject: how to enable DMARC enforcement in 2026

Forums show the same anxiety pattern: 'I want p=reject, but I'm afraid I'll block legit mail.' The rollout is mostly about gates: inventory done, alignment fixed, SPF lookup limit avoided, and then staged enforcement.

DT
DMARCTrust
3 min read
ESPs, subdomains, and the "can't get DKIM to align w/ DMARC" rabbit hole
dmarc ·

ESPs, subdomains, and the "can't get DKIM to align w/ DMARC" rabbit hole

A recurring forum storyline: you set up an ESP, authentication tools say it's fine, yet DMARC alignment is still broken. This usually comes down to how the ESP signs DKIM (d=), whether you're using a custom sending domain, and whether you should isolate with a sending subdomain.

DT
DMARCTrust
4 min read