Sendmarc Releases DMARCbis Fireside Chat Featuring Co-Editor Todd Herr

Why It Matters

DMARCbis will tighten authentication standards, directly affecting email deliverability and phishing defenses for enterprises. Adoption will shape how organizations secure their most vital communication channel.

Key Takeaways

• DMARCbis aims for Proposed Standard, superseding RFC 7489.
• New tag updates reduce ambiguity, simplify large‑scale deployment.
• DNS tree‑walk enhances receiver‑side domain discovery.
• Major providers enforce stricter DMARC, SPF, DKIM requirements.
• Authentication alone doesn’t guarantee inbox placement without good sending practices.

Pulse Analysis

The DMARC protocol, introduced in 2015, quickly became the backbone of email authentication, helping organizations curb domain spoofing. As phishing attacks grow more sophisticated, the IETF’s DMARCbis draft reflects a decade of operational lessons, proposing refinements that address real‑world deployment challenges. By moving toward Proposed Standard status, DMARCbis signals a maturing ecosystem where consistency and clarity are paramount, especially as global enterprises manage thousands of domains across complex sender infrastructures.

Key technical updates in DMARCbis focus on reducing ambiguity and improving scalability. Revised record tags streamline policy expression, while clearer reporting guidelines set expectations for full participation, ensuring that both senders and receivers can exchange actionable data. The introduction of a standardized DNS tree‑walk mechanism simplifies how receivers locate the authoritative domain, enhancing reliability in policy enforcement. These changes aim to lower implementation friction, making robust authentication feasible for organizations of any size.

For businesses, the shift to DMARCbis carries strategic implications. Major providers such as Microsoft, Google, and Yahoo are already tightening enforcement, meaning non‑compliant domains risk reduced deliverability or outright blocking. Sendmarc’s platform positions itself as a bridge, offering tools to automate compliance, monitor reporting, and transition to the new standards smoothly. Companies should prioritize updating their DMARC records, integrating the new tags, and leveraging analytics to maintain reputation, ensuring that authentication supports—not replaces—strong sending practices for optimal inbox placement.