DMARC enforcement
The state in which a domain's DMARC policy, for the organizational domain and all subdomains, is quarantine or reject rather than none.
What it means
RFC 9989 defines Enforcement as a policy other than p=none for an organizational domain and every subdomain below it. At that point the domain can only be used in the From address of mail that passes DMARC at receivers that honour the policy. A domain at p=reject with sp=none is not fully at enforcement.
Getting there means finding every legitimate source in aggregate reports and making each pass with alignment, then raising the policy. Enforcement is also a prerequisite for BIMI, which needs quarantine or reject.
The opposite state, p=none with reporting, is Monitoring Mode.
Related terms
On this site
Sources
What this definition rests on. The wording is ours; the facts are theirs.
- RFC 9989: Domain-based Message Authentication, Reporting, and Conformance (DMARC), section 3.2.9rfc-editor.org
- RFC 9989: Domain-based Message Authentication, Reporting, and Conformance (DMARC), section 5.1.7rfc-editor.org
- Google Workspace Admin Help: Set up BIMIknowledge.workspace.google.com
All 432 terms in the glossaryThe wiki: blocklists and bounce codes