Articles tagged Email Security

Our blog shares expert insights on email security, DMARC configuration, and deliverability optimization.

Return to Blog Home
RFC 9989 (DMARCbis): 3 new tags, p=reject flipped
email-security ·

RFC 9989 (DMARCbis): 3 new tags, p=reject flipped

RFC 9989, 9990, and 9991 replace RFC 7489 from 2015 and make DMARC an IETF Standards Track protocol. Records still start with v=DMARC1, so nothing breaks today. What changed: the p=reject guidance is reversed, three tags are new (np, psd, t), three are removed (pct, rf, ri), the Public Suffix List gives way to a DNS tree walk, and aggregate reports gained fields. Here is what to check.

DT
DMARCTrust
15 min read
Phishing vs spear phishing: what changes when attacks get targeted
email-security ·

Phishing vs spear phishing: what changes when attacks get targeted

Phishing is broad impersonation. Spear phishing is targeted impersonation built around a specific person, role, vendor, or business process. Learn the difference, how executive phishing fits in, and where DMARC helps.

DT
DMARCTrust
10 min read
What is angler phishing? Fake customer support scams explained
email-security ·

What is angler phishing? Fake customer support scams explained

Angler phishing is a social-media scam where fake support accounts target people who publicly ask brands for help. Learn how it works, how to verify support accounts, and how baiting and pharming differ.

DT
DMARCTrust
9 min read
MTA-STS not working? Fix the 7 errors senders report
email-security ·

MTA-STS not working? Fix the 7 errors senders report

MTA-STS breaks when DNS, HTTPS policy hosting, and MX TLS drift out of sync. This troubleshooting guide covers seven failures, the records to check first, and the commands that expose them.

DT
DMARCTrust
14 min read
p=quarantine vs p=reject: DMARC enforcement guide
dmarc-setup ·

p=quarantine vs p=reject: DMARC enforcement guide

Forums show the same anxiety pattern: 'I want p=reject, but I'm afraid I'll block legit mail.' The rollout is mostly about gates: inventory done, alignment fixed, SPF lookup limit avoided, and then staged enforcement.

DT
DMARCTrust
9 min read
VMC vs CMC for BIMI: 2026 prices from ~$649/year
email-deliverability ·

VMC vs CMC for BIMI: 2026 prices from ~$649/year

A buyer's guide to VMC and CMC certificates for BIMI in 2026: list prices ~$1,416 to $1,752/year, resellers from ~$649, trademark vs 12-month-use paths, authorized issuers, and the Gmail checkmark distinction.

DT
DMARCTrust
8 min read
Who is sending mail as us? The Shadow IT sender inventory problem
dmarc-monitoring ·

Who is sending mail as us? The Shadow IT sender inventory problem

The biggest practical blocker to moving beyond p=none isn't DNS syntax. It's discovering every legitimate sender. DMARC reports expose these "unknown senders" and Shadow IT that you didn't even know existed.

DT
DMARCTrust
4 min read

Need expert help with email deliverability?

Hire an email deliverability consultant who has shipped billions of emails. Free assessment, hands-on engagement, written quote before any work starts.

Talk to a consultant