SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Why DMARC fails even when SPF and DKIM pass: the role of domain alignment

0
·8 views

A common situation after moving a DMARC policy beyond p=none is a message where SPF and DKIM both pass yet DMARC still fails. DMARC requires that at least one of these checks passes for the same domain shown in the visible From: header, a requirement known as alignment. Relaxed alignment, the default, accepts subdomains that share the organisational domain, while strict mode demands an exact match. Third-party services such as invoicing tools, CRMs and newsletter platforms often sign with their own domains, which causes this failure, and enabling custom domain authentication with the vendor usually resolves it. Forwarding and DKIM selector or key rotation problems can also break alignment, so administrators should review DMARC aggregate reports regularly and ramp enforcement gradually.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Exposed CI build servers threaten credentials; Jenkins patches five Script Security sandbox escapes

Build servers such as JetBrains TeamCity and Jenkins hold deployment credentials, registry tokens, signing keys and repository write access, making them high-value targets. Internet scans on 23 October 2026 found 1,890 TeamCity instances on ZoomEye, with 792 served over TLS. On 16 September 2026, Jenkins disclosed five Script Security Plugin vulnerabilities, rated 8.8 or 7.5, that allow sandbox escapes by users permitted to run sandboxed scripts. Because such users can execute code on the controller if a sandbox gap exists, the article argues that limiting who holds pipeline-definition permissions and verifying plugin versions against advisories are key defenses. It also notes that incident reconstruction is hard by default, since build logs and agent output may not capture what the controller executed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Team's Product Stalled at Two Daily Clicks, Prompting Shift to Post-Launch SEO Fixes

After their first product, Versely, received only about two Google clicks a day, the team focused on basic SEO repairs rather than launch-day promotion. They corrected canonical tags that were signaling search engines to ignore pages and rewrote titles to match real search queries. Over the following three months, Google impressions reportedly grew to 168,000. The team then packaged this approach into LaunchRanked, a tool offering a free weekly launch board, directory submission services, and AI visibility tracking. The post's author discloses they work on LaunchRanked.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Running many AI agents at once: the failure points that surface first

A dozen parallel agents sharing one codebase, database, and API budget create an operations problem more than a modeling one. The article expects collisions over shared files or rows, unchecked token spending from retry loops, and rate-limit errors that appear random when many agents hit them together. It also flags silent agent failures and drift when agents interpret a goal differently, and warns that reviewers can be overwhelmed as output outpaces human checking. The suggested remedies are isolated workspaces, per-agent budgets, queued and backed-off API calls, required status reports, and a single shared goal document. The author presents this as a checklist of anticipated problems rather than a measured study, and recommends scaling up only after a small setup runs reliably.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Five Email Scripts Freelancers Can Use to Decline Unpaid Scope Creep

Scope creep usually begins with small, informal requests from clients rather than one large change. The article argues that repeatedly agreeing to these add-ons can significantly reduce a freelancer's effective hourly rate. Instead of refusing outright, the author recommends offering a priced add-on or a later phase as an alternative. Five copy-ready email templates are provided for handling extra revisions, tying handoff to final payment, adjusting scope to fit a budget, and pausing projects with stalled assets. The piece also promotes the author's own calculator, a free cheat sheet, and paid resource packs.

0 comments Read more at DEV Community