logoalt Hacker News

jared_stewart • yesterday at 10:06 PM • 2 replies • view on HN

lol DMARC is one record.

It doesn't have to be just one record, but it doesn't have to be more than one record either.


Replies

gnabgib • yesterday at 10:19 PM

DMARC is layered across (/is useless without) two other protocols (SPF, DKIM), both of which also require DNS records.. there's no way to DMARC with one record.. unless you're excluding those SPF and DKIM records in your count. You /could/ DMARC with two records: DMARC+SPF, or DMARK+DKIM but it's ill-advised - use all three. (Ignoring host hierarchy/cname delegation, you can have far more records)

➕ show 2 replies
cowlevel • today at 5:57 AM

Do they literally just need the DMARC record to exist though, or do they need it to actually say something? Do you need DKIM? I found that SPF is very easy but DKIM is a royal pain.