When looking at the detailed section for my domain I can see that HubSpot section stating that SPF is 0% in alignment. I know that only SPF or DKIM need to align for DMARC to be in alignment. But I am so confused by the SPF Result column that states pass with the DMARK column beside it stating it failed alignment. Why does it say “pass” in the SPF Result column? it didn’t pass.. I know because we typoed the record!
Hello and welcome to the dmarcian forum.
In order for SPF to be aligned, the envelope domain (used by SPF) needs to match the From domain. You can see that the envelope domain that is passing SPF is hubspotemail.com which means that it cannot align with mail that uses your domain in the From field. It passes the SPF check since it was sent from a source that is authorized by the SPF record for the hubspotemail.com domain.
Awesome, thanks. I will let them know to make these adjustments!
What adjustments? There isn’t anything to be done. You just need to know that your Hubspot emails can only pass DMARC using DKIM. SPF with Hubspot requires a plan with a static IP, which is not necessary for must users.
You can learn more about DMARC capabilities of various sources, including Hubspot, on the following site that dmarcian maintains.
I will tell them to use a proper from address in the envelope. Why would it require a plan with a static IP address?
I presume because they require that in order to send Hubspot email that will pass an aligned SPF test. It is explicitly mentioned in the dmarc.io site I shared. You would need to follow the link from there to the Hubspot documentation to learn more about their requirements and limitations.
