GlockApps monitors your DMARC, DKIM, and SPF alignment rate and sends an alert to you when the compliance rate becomes much lower compared to the past days.
SPF alignment breaks when a parent domain in “Mail FROM” or “Return-Path” doesn’t match the domain in “Header From”. In case of emails sent from your legal sources, it happens when:
- Your email service provider (ESP) doesn’t allow using a custom domain for “Mail FROM” and sends your messages on behalf of its own domain.
- The message was forwarded by the recipient’s email client. The email headers are often preserved when emails are forwarded causing DKIM alignment to pass and SPF alignment to fail because the “Mail FROM” address no longer matches your email address.
Generally, there’s nothing to worry about if your emails pass DKIM alignment which makes them pass DMARC as well.