DMARC Enhancements for Email Authentication and Reporting

On August 3, 2026, RFC 9989 and RFC 9990 were published, detailing the DMARC (Domain-based Message Authentication, Reporting & Conformance) framework. DMARC allows domain owners to specify their email validation policies and receive reports on email authentication results. The new specifications enhance the reporting mechanisms, enabling domain owners to gain insights into how their policies affect email streams. This visibility is crucial for improving email security and combating phishing attacks. The reports provide aggregate data on messages that passed or failed DMARC checks, allowing for informed policy adjustments. The focus remains on the RFC5322.From address, which is often targeted for forgery. The updates aim to bolster email authentication practices and enhance overall cybersecurity for organizations relying on email communication.

Key Points: • DMARC framework updates improve email authentication and reporting. • Domain owners receive aggregate feedback to refine their DMARC policies. • Focus remains on the RFC5322.From address, a common target for forgery.