← Blog

Topic

Deliverability & authentication

SPF, DKIM, DMARC, and reaching the inbox.

Illustration for what changed in DMARC RFC 9989, the 2026 standard that replaces RFC 7489, removes the pct tag and drops the Public Suffix List
Deliverability & authentication

DMARC RFC 9989: What Changed From RFC 7489 (2026)

What changed in DMARC RFC 9989 (2026): it replaces RFC 7489, drops the pct tag, and swaps the Public Suffix List for a bounded DNS tree walk.

Nafiul HasanNafiul Hasan
AI Emaily blog cover for adding SPF, DKIM and DMARC records in Cloudflare DNS, showing email authentication TXT records in the Cloudflare DNS dashboard
Deliverability & authentication

How to Add SPF, DKIM and DMARC Records in Cloudflare DNS

How to add SPF, DKIM and DMARC records in Cloudflare DNS: where TXT records live, why the proxy toggle never applies, and how to fix ones that won't resolve.

Nafiul HasanNafiul Hasan
AI Emaily blog cover on how to send cold email without burning your domain, showing outreach routed through a separate sending domain away from the primary business domain
Deliverability & authentication

How to Send Cold Email Without Burning Your Domain

How to send cold email without burning your domain: send from a separate, authenticated domain, keep volume low, and watch your spam-complaint rate.

Nafiul HasanNafiul Hasan
Diagram of a safe DMARC rollout moving from p=none to quarantine to reject, starting with low-volume subdomains and finishing with the parent domain
Deliverability & authentication

DMARC Rollout: Going From p=none to p=reject Safely

How to move DMARC from p=none to reject safely: monitor, fix every legitimate source, then quarantine and reject — subdomains first, parent domain last.

Nafiul HasanNafiul Hasan
Diagram of an SPF record crossing the RFC 7208 ten DNS-lookup limit and returning a PermError, with the four fixes to reduce SPF DNS lookups
Deliverability & authentication

How to Fix the SPF "Too Many DNS Lookups" PermError

SPF fails with a 'too many DNS lookups' PermError once your record passes RFC 7208's 10-lookup cap. How to fix SPF too many DNS lookups, cause by cause.

Nafiul HasanNafiul Hasan
Diagram of Gmail rejecting non-compliant bulk email at the gateway when SPF, DKIM, and DMARC authentication fails
Deliverability & authentication

Gmail Is Rejecting Non-Compliant Bulk Email: What Changed

Gmail rejecting non-compliant bulk email: since November 2025 it issues temporary and permanent bounces, not just spam-foldering. Which record to fix first.

Nafiul HasanNafiul Hasan
Diagram of how to set up SPF, DKIM and DMARC in Google Workspace, with three DNS records authenticating outbound mail before it reaches Gmail
Deliverability & authentication

How to Set Up SPF, DKIM and DMARC in Google Workspace

How to set up SPF, DKIM and DMARC in Google Workspace: the exact DNS values, the Admin console DKIM steps, and a safe starting DMARC record.

Nafiul HasanNafiul Hasan
Cover illustration for setting up SPF, DKIM and DMARC in Microsoft 365, showing the SPF TXT record, two DKIM CNAME selectors in the Defender portal, and a DMARC record
Deliverability & authentication

How to Set Up SPF, DKIM and DMARC in Microsoft 365

How to set up SPF, DKIM and DMARC in Microsoft 365: the exact records, the two DKIM CNAME selectors in the Defender portal, and the onmicrosoft.com step.

Nafiul HasanNafiul Hasan
Cover illustration for the Gmail and Yahoo bulk sender requirements checklist, showing SPF, DKIM, and DMARC authentication checks for 2026
Deliverability & authentication

Gmail and Yahoo Bulk Sender Requirements: 2026 Checklist

Gmail and Yahoo bulk sender requirements checklist, verified August 2026: SPF, DKIM, DMARC, alignment, one-click unsubscribe, spam rate, and DNS.

Nafiul HasanNafiul Hasan
Diagram for how to implement one-click unsubscribe (RFC 8058): a List-Unsubscribe header with an HTTPS URI, a List-Unsubscribe-Post header, DKIM signing, and an unauthenticated HTTPS POST endpoint.
Deliverability & authentication

How to Implement One-Click Unsubscribe (RFC 8058)

How to implement one-click unsubscribe (RFC 8058): the two headers, DKIM coverage, and the unauthenticated POST endpoint bulk senders now need.

Nafiul HasanNafiul Hasan
Diagram of Outlook.com high-volume sender requirements: SPF, DKIM and DMARC authenticating a domain that sends more than 5,000 messages a day, with compliant mail reaching the inbox and non-compliant mail routed to Junk.
Deliverability & authentication

Outlook.com High-Volume Sender Requirements: What to Do Now

Outlook.com high volume sender requirements: SPF, DKIM and DMARC are required above 5,000 messages/day, or Outlook sends your mail to Junk.

Nafiul HasanNafiul Hasan
Diagram of a sent email being checked for authentication, sender reputation, engagement and content before landing in the inbox instead of the spam folder
Deliverability & authentication

Why Do My Emails Go to Spam Instead of the Inbox?

Why do my emails go to spam instead of inbox? Fix it in the right order: authentication first, then reputation, engagement, and content.

Nafiul HasanNafiul Hasan

Everything else in deliverability & authentication

Ready when you are

Email, finally worthy of your attention.

Start your 7-day free trial. Cancel anytime.

  • 7-day free trial
  • Cancel anytime
  • Every provider