02. Email Authentication: Required DNS Records for Sending Email

Email Authentication Explained:

To ensure consistent email delivery, all bulk email senders are required to implement SPF, DKIM, and DMARC DNS records. The good news is you likely already have an SPF and DKIM record installed, but likely still need a DMARC record (Domain-based Message Authentication, Reporting, and Conformance) which enhances email security and helps all your messages – not just those sending on the MindFire Platform – avoid spam filters and reach the intended recipients.

ALL bulk mail must now be authenticated with SPF, DKIM, and DMARC, it is no longer a nice to have, but a must-have. 

What is DMARC? 

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a standard created to protect both senders and recipients alike from dangers leading to data theft, which could result in monetary loss for both parties.

Please coordinate with your IT team to ensure that the following 3 records exist for any domain you are sending bulk email out of the MindFire Platform.

How to add an SPF record:

1. Login to your DNS and go to your domain

2. Create a NEW TXT record

3. For Host add: @

4. For Value add: v=spf1 include:email-od.com ~all

5. Save your changes.

How to add a DKIM signature:

1. Login to your DNS and go to your domain

2. Create a NEW CNAME record

3. For Host add: dkim._domainkey

   1. Users not using GoDaddy or Google Domains may be asked to add the domain for this step. You’ll go ahead and add the end of the string: dkim._domainkey.exampledomain.com

4. For Value add: dkim._domainkey.email-od.com

5. Save your changes.

6. Once you’ve completed this step, please let the MindFire support team know so they can complete the final step of adding your domain to their server and you’ll be all set

How to add a DMARC record:

1. Login to your DNS and go to your domain

2. Create a NEW TXT record

3. For Host add:  _dmarc    

   1. Users not using GoDaddy or Google Domains may be asked to add the domain for this step. You’ll go ahead and add the end of the string: dkim._domainkey.exampledomain.com

4. For Value add:  v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com; ruf=mailto:dmarc-forensics@example.com;

5. Save your changes.

6. PLEASE NOTE: This is an example DMARC record. Please consult your IT team if you require additional support on this topic and would like to receive reporting.