Email Deliverability: SPF, DKIM, DMARC and List Hygiene

Deliverability is the ability of legitimate mail to reach the intended mailbox; inbox placement is controlled by recipient providers and cannot be guaranteed. SPF authorizes sending hosts for a domain. DKIM adds a cryptographic signature that receiving systems can verify. DMARC lets a domain publish a policy and receive reports based on identifier alignment and authentication results.

A practical way to apply it

Inventory every legitimate sending source before changing DNS. Publish one SPF policy per domain and include only authorized services. Enable DKIM for each sender and confirm that the visible From domain aligns with authenticated identifiers for DMARC. Start DMARC reporting with a policy that matches your operational readiness; review reports before tightening enforcement.

Before using the pattern

Before editing DNS, list every service that sends for the domain and identify who owns each record. Check SPF for a single valid policy, DKIM selectors for each sender and DMARC alignment in reports. Make one controlled change at a time, observe results and ask the mail administrator before removing a source you do not recognize.

A worked example

Authentication is only one part of sender reputation. Use accurate sender identity, send expected content, remove hard bounces, honor unsubscribes and avoid sudden volume changes. Google and Yahoo publish additional requirements for bulk senders; check their current guidance because thresholds and operational details can change.

Common mistakes to avoid

Do not assume SPF, DKIM or DMARC guarantees inbox placement. Monitor authentication results, complaints and bounces, and keep the list tied to a documented source and purpose. Technical standards and provider policies evolve; consult the linked primary sources and your mail administrator before changing DNS.