Glossary: Endpoint, Application and Email Security

DMARC (Domain-based Message Authentication, Reporting, and Conformance)

Also written: _dmarc, RFC 9989

The policy layer on top of SPF and DKIM, published at _dmarc in DNS. It checks that a passing domain aligns with the visible From line, tells receivers what to do with failures, and sends reports to the domain owner.