DMARC
Technology & Computing abbreviation · Cybersecurity
| Stands for | Domain-based Message Authentication, Reporting and Conformance |
|---|---|
| Categories | Technology & Computing |
DMARC stands for Domain-based Message Authentication, Reporting and Conformance, a cybersecurity abbreviation.
An email policy standard built on SPF and DKIM that lets a domain owner tell receivers what to do with mail failing authentication (none, quarantine or reject) and receive reports on who is sending mail in the domain's name.
Example: Move DMARC from p=none to p=reject once every legitimate sender passes alignment.
Usage notes
Developed by companies including PayPal, Google, Microsoft and Yahoo and published as RFC 7489 in 2015. Google and Yahoo began requiring DMARC from bulk senders in February 2024. A reject policy stops criminals from sending mail that appears to come from the exact domain, though look-alike domains remain a problem. Pronounced "dee-mark".
Related abbreviations
More cybersecurity abbreviations
- DES – Data Encryption Standard
- DevSecOps – Development, security and operations
- DFIR – Digital forensics and incident response
- DH – Diffie-Hellman (key exchange)
- DKIM – DomainKeys Identified Mail
- DLP – Data loss prevention
- DoS – Denial of service
- DPI – Deep packet inspection
- DSA – Digital Signature Algorithm
- E2EE – End-to-end encryption
- EAP – Extensible Authentication Protocol
- ECC – Elliptic-curve cryptography