Prepared
In November 2026, we published DMARC records for selected domains we manage and verified that those DNS records were visible publicly. We also enabled Microsoft 365 DKIM signing on selected domains where we had access. Existing SPF and mail-routing records were retained where appropriate.
What these records do
SPF identifies permitted sending systems. DKIM adds a signature that receiving systems can check. DMARC tells receivers how to use those results and whether the visible From domain aligns with them.
The newly published DMARC policies are in monitoring mode. They do not instruct receivers to quarantine or reject mail. DNS publication is one step; real-message authentication, alignment and delivery still need to be checked for each sending service.
An email authentication review
For a domain you manage, JXL can identify the systems that send mail, review the current SPF, DKIM and DMARC records, agree safe changes, and check representative messages after the changes. Any move towards a stricter DMARC policy depends on the actual sender results and your approval.