The Rejected Folder

Our blog shares expert insights on email security, DMARC configuration, and deliverability optimization.

Why I made the SPF generator care about the lookup budget
email-deliverability ·

Why I made the SPF generator care about the lookup budget

Marc's note on the product choice behind our SPF generator: show the lookup budget early, treat provider presets carefully, and never pretend a browser estimate is live DNS validation.

DT
DMARCTrust
7 min read
How to add or edit a DMARC record in GoDaddy
dmarc-setup ·

How to add or edit a DMARC record in GoDaddy

GoDaddy's DNS interface lets you add or edit DMARC as a TXT record at _dmarc. Here's the current GoDaddy path, including what to do if a default DMARC record already exists.

DT
DMARCTrust
10 min read
The guardrails inside our DMARC generator
free-tools ·

The guardrails inside our DMARC generator

Marc's note on the guardrails inside our DMARC generator: report URI cleanup, external destination warnings, old syntax handling, and current DMARC record choices.

DT
DMARCTrust
6 min read
p=quarantine vs p=reject: DMARC enforcement guide
dmarc-setup ·

p=quarantine vs p=reject: DMARC enforcement guide

Forums show the same anxiety pattern: 'I want p=reject, but I'm afraid I'll block legit mail.' The rollout is mostly about gates: inventory done, alignment fixed, SPF lookup limit avoided, and then staged enforcement.

DT
DMARCTrust
9 min read
DMARC monitoring: making sense of aggregate reports (RUA)
dmarc-monitoring ·

DMARC monitoring: making sense of aggregate reports (RUA)

Monitoring pain is mostly workflow pain: DMARC aggregate reports (RUA) are XML (often compressed), arrive on imperfect schedules, and are hard to triage. We explain how to turn the XML firehose into actionable security insights.

DT
DMARCTrust
5 min read
ESPs, subdomains, and the "can't get DKIM to align w/ DMARC" rabbit hole
dmarc-setup ·

ESPs, subdomains, and the "can't get DKIM to align w/ DMARC" rabbit hole

A recurring forum storyline: you set up an ESP, authentication tools say it's fine, yet DMARC alignment is still broken. This usually comes down to how the ESP signs DKIM (d=), whether you're using a custom sending domain, and whether you should isolate with a sending subdomain.

DT
DMARCTrust
5 min read
VMC vs CMC for BIMI: 2026 prices from ~$649/year
email-deliverability ·

VMC vs CMC for BIMI: 2026 prices from ~$649/year

A buyer's guide to VMC and CMC certificates for BIMI in 2026: list prices ~$1,416 to $1,752/year, resellers from ~$649, trademark vs 12-month-use paths, authorized issuers, and the Gmail checkmark distinction.

DT
DMARCTrust
8 min read
Who is sending mail as us? The Shadow IT sender inventory problem
dmarc-monitoring ·

Who is sending mail as us? The Shadow IT sender inventory problem

The biggest practical blocker to moving beyond p=none isn't DNS syntax. It's discovering every legitimate sender. DMARC reports expose these "unknown senders" and Shadow IT that you didn't even know existed.

DT
DMARCTrust
4 min read
DMARC, SPF, DKIM... and the thing everyone misses: alignment
dmarc-setup ·

DMARC, SPF, DKIM... and the thing everyone misses: alignment

Forum threads keep repeating the same confusion: "SPF and DKIM pass, so why does DMARC fail?" The missing mental model is DMARC alignment. We explain aspf/adkim, organizational vs strict alignment, and why you likely rely on DKIM alignment more than you think.

DT
DMARCTrust
5 min read

Need expert help with email deliverability?

Hire an email deliverability consultant who has shipped billions of emails. Free assessment, hands-on engagement, written quote before any work starts.