DMARC: Building Open-Source Email Authentication Technologies
Feb 1, 2012Michael Adkins
Summary
This post details the development and open-sourcing of DMARC (Domain-based Message Authentication, Reporting & Conformance), an email authentication protocol designed to combat domain spoofing and phishing. It explains how DMARC builds upon existing technologies like DKIM and SPF to provide aggregated, anonymized reports to domain owners, enabling them to audit their infrastructure and eventually request mailbox providers to reject unauthenticated email. The post highlights DMARC's flexibility, gradual rollout options, and its adoption as an open specification under the Open Web Foundation Agreements.
More from the Application Security and Permissions trail
- How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
- Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study
- Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable
- How Meta Is Strengthening End-to-End Encrypted Backups
- Post-Quantum Cryptography Migration at Meta: Framework, Lessons, and Takeaways