Sendmarc Releases DMARCbis Fireside Chat Featuring Co-Editor Todd Herr
Wilmington, North America, Fri, Feb 24, 2026
Wilmington, North America, Fri, Feb 24, 2026
Sendmarc has released a new DMARCbis fireside chat featuring Todd Herr, Principal Solutions Architect at GreenArrow Email and co-editor of DMARCbis, discussing the upcoming update to DMARC (Domain-based Message Authentication, Reporting, and Conformance). The session, led by Dan Levinson of Sendmarc, outlines the progress of the protocol through the IETF (Internet Engineering Task Force) standards process and the expectations for security and email teams as authentication requirements become more stringent.
DMARC, initially published in 2015, has become an essential tool for reducing domain spoofing and increasing visibility into domain usage. The updated DMARCbis (draft-ietf-dmarc-dmarcbis-41), if approved, will replace RFC 7489. Herr emphasizes that DMARCbis represents an evolution rather than a revolution, incorporating lessons learned from real-world deployment and enhancing long-term maintainability.
Discussion Themes and Platform Updates
The video covers several key updates and themes for businesses planning email security strategies:
DMARC, initially published in 2015, has become an essential tool for reducing domain spoofing and increasing visibility into domain usage.
Record Tag Updates and Deprecations: New tag updates aim to reduce ambiguity and ensure consistent implementation, facilitating practical deployment at scale. Clearer Reporting and Participation Expectations: The discussion clarifies what constitutes "full participation," including the operational tasks necessary for aligned authentication and effective reporting. Receiver-Side Policy Discovery via DNS Tree Walk: DMARCbis introduces a standardized DNS tree walk approach to improve the discovery of organizational domains by receivers. Levinson notes that major mailbox providers such as Microsoft, Google, and Yahoo have implemented strict sender requirements, underscoring the importance of authentication in protecting email communication.
Herr also addresses misconceptions, such as the belief that simply publishing DMARC guarantees inbox placement. The discussion highlights that while authentication aids mailbox providers in evaluating identity and reputation, it does not replace robust sending practices.
Watch the full discussion on upcoming DMARC changes here.
Sendmarc assists organizations in protecting their domains from email impersonation by facilitating practical DMARC deployment and management at scale. The platform supports large enterprises in deploying domain protection, reducing phishing and spoofing risks, and maintaining control across complex, multi-domain ecosystems. Sendmarc also enhances deliverability by ensuring legitimate communications authenticate correctly and reach intended inboxes. Enterprises globally depend on Sendmarc’s tools and expertise to transition from visibility to enforcement and sustain DMARC compliance.
Based on reporting by Cyber Security News.