Why SPF, DKIM and DMARC are read together
All three tell a receiving server whether mail from your domain is genuine. SPF names the allowed senders, DKIM signs the message, and DMARC sets the policy when the other two fail. The bars show whether each record exists: full if published, empty if not. The score summarizes the set.
Gmail and Yahoo expect these records from bulk senders. A missing SPF is enough to push ordinary company mail into spam as well.
| Record | Job | Healthy ending |
|---|---|---|
| SPF | Who may send | Ends in ~all or -all |
| DKIM | A signature | The selector is published in DNS |
| DMARC | Policy when checks fail | Start at p=none, then quarantine or reject |
| MX | Inbound mail server | Priorities in the right order |