Skip to main content

How do SPF, DKIM, and DMARC work together?

SPF authenticates the sending server.

DKIM authenticates message integrity.

DMARC checks alignment and chooses the policy.

Think of it this way.

SPF is the port of origin.

DKIM is the wax seal on the cargo.

DMARC is the ship’s manifest checking that the flag on the ship matches either the port of origin or the cargo seal.