Glossary · Security and privacy
DMARC alignment
The requirement that the domain which passed SPF or DKIM be the same organisational domain as the visible From address.
What DMARC alignment means
The requirement that the domain which passed SPF or DKIM be the same organisational domain as the visible From address. A sender can pass SPF or DKIM on its own domain and still fail DMARC because nothing aligned, which is how a marketing platform or form tool that signs with its own domain lands in spam under quarantine.
What DMARC alignment can and cannot support
| It can support | It cannot support |
|---|---|
| The requirement that the domain which passed SPF or DKIM be the same organisational domain as the visible From address. | A sender can pass SPF or DKIM on its own domain and still fail DMARC because nothing aligned, which is how a marketing platform or form tool that signs with its own domain lands in spam under quarantine. |
Terms this definition uses
Related terms in Security and privacy
Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
Indirect prompt injection · Direct prompt injection · Jailbreak · Data exfiltration · Sensitive information disclosure · Secret leakage · Insecure output handling · Excessive agency · Least privilege · Trust boundary · Input validation · Output validation · Allowlist · Denylist · SSRF · RCE · Credential scope · OAuth scope · API key · Bearer token · mTLS · Rate-limit policy · Audit log · PII · Data minimization · Purpose limitation · Retention period · Data residency · Tenant isolation · Threat model · DMARC · SPF · DKIM · MTA-STS · TLS-RPT · CAA record · DNSSEC · hard bounce
Questions about DMARC alignment
What is DMARC alignment?
The requirement that the domain which passed SPF or DKIM be the same organisational domain as the visible From address.
What does DMARC alignment not show or guarantee?
A sender can pass SPF or DKIM on its own domain and still fail DMARC because nothing aligned, which is how a marketing platform or form tool that signs with its own domain lands in spam under quarantine.
Which area of the glossary does DMARC alignment belong to?
Security and privacy: Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
See it in the full glossary · 668 terms across 19 areas.