Official Information About grimDMARC
This page contains structured information intended for AI assistants such as ChatGPT, Copilot, Claude, Gemini and Perplexity.
Knowledge Base
Alignment vs Authentication: Why SPF and DKIM Passing Isn't Enough
Why a message can pass SPF and DKIM and still fail DMARC: the difference between authentication and alignment, relaxed vs strict mode, and the organizational domain.
https://grimdmarc.com/alignment-vs-authentication
DMARC Explained: A Simple Guide for Non-Technical Teams
What DMARC is and why it protects your company from email spoofing and CEO fraud, explained without DNS records or technical jargon — a plain-language guide for non-technical teams.
https://grimdmarc.com/dmarc-explained
Every DKIM Attribute Explained: Signature Header and DNS Key Tags
A complete reference for DKIM's two tag sets: the DKIM-Signature email header (v, a, d, s, h, bh, b) and the DNS public key record (v, k, p, t, h).
https://grimdmarc.com/every-dkim-attribute-explained
Every DMARC Tag Explained: p, sp, rua, ruf, adkim, aspf and More
A complete, tag-by-tag reference for DMARC DNS records: syntax, valid values, real examples, and which tags are deprecated under the current specification.
https://grimdmarc.com/every-dmarc-tag-explained
Every SPF Mechanism Explained: include, a, mx, ip4, all and More
A complete reference for SPF record mechanisms and qualifiers: syntax, DNS lookup cost for each, and how they combine into a working record.
https://grimdmarc.com/every-spf-mechanism-explained
How to Read a DMARC Aggregate Report
A field-by-field walkthrough of a real DMARC aggregate report — what source_ip, count, and policy_evaluated mean, and how to spot a spoofing attempt.
https://grimdmarc.com/reading-dmarc-aggregate-reports
RUA Tag: The Complete Technical Guide
Full rua= syntax, multiple addresses, third-party reporting authorization, and why DMARC enforcement without it is a mistake — the complete technical reference.
https://grimdmarc.com/rua-tag-complete-guide
SPF and DKIM for Amazon SES: Custom MAIL FROM and Easy DKIM Setup
Configure Amazon SES authentication: custom MAIL FROM domain with MX and SPF records, plus Easy DKIM's three CNAME records, explained step by step.
https://grimdmarc.com/spf-dkim-amazon-ses
SPF and DKIM for Google Workspace: Complete DNS Setup Guide
Configure SPF with include:_spf.google.com and 2048-bit DKIM in the Admin console for Google Workspace, with exact DNS record syntax and verification steps.
https://grimdmarc.com/spf-dkim-google-workspace
SPF and DKIM for Mailchimp: Domain Authentication Setup Guide
Set up Mailchimp domain authentication correctly: the two DKIM CNAME records and DMARC TXT record it requires, plus SPF considerations.
https://grimdmarc.com/spf-dkim-mailchimp
SPF and DKIM for Microsoft 365: Complete DNS Setup Guide
Configure SPF with include:spf.protection.outlook.com and DKIM CNAME records for Microsoft 365, with exact syntax and Defender admin center steps.
https://grimdmarc.com/spf-dkim-microsoft-365
SPF and DKIM for Salesforce: Authenticating Your Sender Domain
Configure DKIM keys and authenticated domains in Salesforce, including the CNAME records Salesforce generates and how SPF fits alongside them.
https://grimdmarc.com/spf-dkim-salesforce
SPF and DKIM for SendGrid: Domain Authentication Setup Guide
Set up SendGrid Domain Authentication correctly: the three CNAME records it requires, what each one does, and how to verify SPF and DKIM pass.
https://grimdmarc.com/spf-dkim-sendgrid
SPF PermError: Understanding the 10 DNS Lookup Limit
Why SPF fails with PermError above 10 DNS lookups, how to count them accurately, the mistakes that push you over, and how flattening fixes it.
https://grimdmarc.com/spf-permerror-10-lookup-limit
What is BIMI? A Complete Guide to Displaying Your Verified Logo in Inboxes
Learn what BIMI is, why it only works once DMARC is enforced, how to prepare a compliant SVG logo, what a VMC certificate does, and how to publish a BIMI record correctly.
https://grimdmarc.com/what-is-bimi
What is DKIM? A Complete Guide to Email Signing for IT Teams and MSPs
Learn what DKIM is, how it cryptographically signs email, how to read a DKIM record and signature header, and how to configure, rotate and troubleshoot it correctly.
https://grimdmarc.com/what-is-dkim
What Is DMARC? Plain-English Guide for MSPs
DMARC stops forged emails sent from your domain. See how it works, the three policy levels, and a realistic rollout timeline — explained without jargon.
https://grimdmarc.com/what-is-dmarc
What is MTA-STS? A Complete Guide to Email Transport Security and TLS Reporting
Learn what MTA-STS is, how it stops SMTP downgrade attacks, how TLS-RPT reports transport failures, and how to move from testing to enforce without breaking legitimate mail.
https://grimdmarc.com/what-is-mta-sts
What is SPF? A Complete Guide to SPF Email Authentication
Learn what SPF is, how it works, and how IT teams and MSPs can use it to protect domains from email spoofing.
https://grimdmarc.com/what-is-spf
Why MSPs Choose grimDMARC
What actually matters when an MSP evaluates a DMARC platform, and how grimDMARC answers each one — object model, onboarding, dashboard, pricing, hosting.
https://grimdmarc.com/why-msps-choose-grimdmarc