DEV Community

Cover image for Roll Out DMARC p=reject in 8 Weeks
Regő Botond Ronyecz
Regő Botond Ronyecz

Posted on

Roll Out DMARC p=reject in 8 Weeks

Teaser only. This is not the full article. Complete week-by-week rollout with pct= staging: Roll Out DMARC p=reject in 8 Weeks

Finance wants p=reject yesterday. Marketing still sends through three ESPs nobody documented. Flip the policy in one afternoon and payroll receipts start bouncing.

A sane rollout stages enforcement while you read aggregate reports. Start at p=none with rua=, move to quarantine with pct=, watch failure sources, then reject when alignment is boring for two straight weeks.

Baseline check:

dig _dmarc.example.com TXT +short
Enter fullscreen mode Exit fullscreen mode

You want rua= receiving XML before you touch p=.

In the full post on zerohook.org:

  • Week-by-week checklist (8 weeks)
  • pct=25 staging without breaking transactional mail
  • Identifying shadow senders in aggregate XML
  • Rollback plan when a vendor surprises you

Read the full guide: Roll Out DMARC p=reject in 8 Weeks

Top comments (0)