How do TXT records interact with DMARC, SPF, and DKIM?
The three protocols use TXT records differently:
SPF: TXT record at domain apex (tidalmail.com). Checked during SMTP transaction using envelope sender.
DKIM: TXT record at selector._domainkey.domain. Checked by verifying signature in message header against public key.
DMARC: TXT record at _dmarc.domain. Specifies what to do when SPF or DKIM fails alignment.
Interaction:
DMARC checks if SPF passed AND aligned with From domain.
DMARC checks if DKIM passed AND aligned with From domain.
DMARC passes if either check passes.
All three rely on TXT records but at different locations and for different purposes.
Three different credentials verified independently, but the final decision considers all three together.
Was this answer helpful?
Thanks for your feedback!