Making Sure Your Emails are Delivered in 2024
Lisa Hirst Carnes | March 2024
Guarantee your organization’s messages are landing in the recipient’s inbox by establishing DKIM authentication and a DMARC policy.
It’s hard to believe that email has been around for over 50 years. If you’re like me, it’s something you need yet loathe. Over the years, we’ve come to rely on it, and if you’re a knowledge worker, it’s a vital communication tool you use daily!
You may have encountered an email spoofing attempt. It usually goes something like this. An attacker creates an email that looks like it’s coming from Netflix. The email warns you that it will suspend your account if you don’t click a link and change your password. Sound familiar?
Google and Yahoo use AI to block phishing and malware, but threats are sophisticated. Both providers recently introduced rules for bulk senders (more than 5,000 emails daily) to combat spam.
But before we get to those updates, let’s cover some email jargon. Here are some essential email acronyms you might hear flung around.
SPF
In this case, we’re not discussing the Sun Protection Factor but the Sender Policy Framework (SPF). SPF is an email authentication method that protects your domain against spoofing. It also keeps outgoing messages from getting labeled as spam.
SPF makes it difficult for scammers because it specifies which servers can send emails from your domain.
DKIM
DomainKeys Identified Mail (DKIM) is an authentication tool that uses a digital signature to specify an authorized email.
A DKIM record is a line of text within the DNS record containing the public key that receiving servers can use to authenticate the signature. Adding a DKIM record to your DNS helps authenticate email from your domain. DKIM is essential because it confirms the legitimacy of the sender.
DMARC
DMARC is an email authentication method that helps prevent attackers from spoofing a domain.
2024 Email Requirements
Now that we’ve defined common email lingo, let’s return to the new requirements.
This new rule focuses on email validation and email deliverability. Email validation was optional in the past, but now it isn’t. The sender needs validation that they are who they claim to be. Without authentication, your email may not be delivered.
Authenticate your email by specifying who may send email from your domain. For example, you may use MailChimp for email marketing. If DKIM authentication and DMARC policy aren’t in place, your messages may not be sent.
Popular third-party platforms requiring SPF and DKIM records include:
- Constant Contact
- Mailchimp
- SalesForce
- Blackbaud
- Little Green Light
- GiveWP
- AMO
- HubSpot
If you’re working with a hosting provider, here’s the general DKIM DMAC approach:
- Determine if you have DKIM records for each service you use to email. If you do NOT have DKIM records in place, you’ll need to retrieve them from each email service and add them to your DNS.
- Find out if you have a DMARC policy in place. The DMAC Check Tool will scan your domain and let you know if you do NOT have a DMARC policy. If so, we will set up a DMARC policy based on your requirements.
- No action is needed if you already have DKIM for each email service and an established DMARC record.
We know the world of email may be confusing. If you received this message, please complete our email deliverability form.
