What is DMARC? A plain-English guide for law firms
What is DMARC, what it does for a law firm’s email, how it works with SPF and DKIM, what its three policies mean, and what it cannot do.
5 min read
Guides
Email authentication, explained for law firms.
What DMARC, SPF and DKIM are, what they stop and what they do not, and how firms finish the work with their IT provider. Every figure comes with its source.
SPF, DKIM and DMARC explained: how the three work together
SPF, DKIM and DMARC explained for law firms: what each one checks, why none is enough alone, how alignment ties them together, and what goes wrong.
5 min read
DMARC policy: none, quarantine or reject, and how a firm moves between them
What each DMARC policy does, why p=none protects no one, how to reach quarantine and reject without losing client email, and what RFC 9989 changed.
5 min read
DMARC fail: why legitimate email fails DMARC, and how to fix it
DMARC fail explained: why legitimate email fails DMARC, from third-party senders and onmicrosoft.com signing to forwarding and SPF limits, and each fix.
5 min read
Email spoofing: how criminals send email as your firm, and what stops them
Email spoofing explained for law firms: how forged From addresses work, how spoofing differs from lookalike domains and hacked mailboxes, and what stops each.
5 min read
Payment diversion fraud and email: what authentication stops, and what it does not
How payment diversion fraud uses email against law firms and their clients, what DMARC can stop, what it cannot, and the controls that close the gaps.
5 min read