Domain-based Message Authentication, Reporting and Conformance

DMARC defines how recipients should handle emails that fail the Sender Policy Framework (SPF) or DomainKeys Identified Mail (DKIM) check: deliver, move to spam or reject. In addition it provides the domain owner with reports on abuse of the domain. Only a strict DMARC policy effectively prevents attackers from using one's own domain for phishing.