If you see a "DMARC Not Found" entry, a "DMARC Not Published" entry, or a "No DMARC" entry, then the domain is missing the most efficient and powerful email authentication mechanism such as DMARC .
To prevent email spoofing (the practice of attackers masquerading as a specific user or device connected to a network in order to steal data), all domains must have an email authorization system. You've probably heard of the SPF and DKIM mechanisms. But the point is, neither SPF nor DKIM on their own can stop borrowing your domain, nor can they prevent email spoofing. DMARC (Domain-based Message Authentication, Reporting & Conformance) comes to the rescue. It combines SPF and DKIM mechanisms and provides 100% protection against attacks.
DMARC . - . , . Verizon Data Breach Investigations Report 2018, 93% . 80% DBIR.
, DMARC?
, - DMARC:
No DMARC record
No DMARC record found
DMARC record is missing
DMARC record not found
No DMARC record published
DMARC policy not enabled
Unable to find DMARC record
, . 2 .
1: “No DMARC record”, DMARC .
. “ DMARC ” DNS TXT _dmarc.yourdomain.com DMARC.
DMARC :
v=DMARC1; p=none; rua=mailto:whateveryoulike@yourdomain.com
! DMARC .
, , .
2: 100% .
100% , DMARC , . 100% ; ( 2 , ).
, , , , , . , , ( , , ).
DMARC.
3 “No DMARC record found”
1. SPF.
SPF EasyDMARC , DNS.
SPF .
v=spf1 include:spf.easydmarc.com include:amazonses.com ip4:198.105.215.71/32 -all
2. DKIM.
. DKIM EasyDMARC DKIM. , Linux DKIM.
DKIM.
3. DMARC.
DMARC. DMARC EasyDMARC DNS.-, (p=none). .
p=reject , , .
, SPF, DKIM .
, DMARC “p=reject” . “p=reject” , DNS , .
, EasyDMARC. DMARC:
DMARC- DNS:
, , , .