Hi, I’m just starting with Dmarcian and I’m trying to learn how to analyze the reports. I’m befuddled by a pattern where SPF and DKIM rates are roughly the same for a single sending entity:
Let’s take Sendgrid for the example. SPF is 37.51% and DKIM is 36.86%, roughly the same. This is as opposed to the more familiar pattern where SPF -or- DKIM is failing but the other is succeeding. What would cause both SPF and DKIM to fail at roughly the same rate?
The same is true with Microsoft 365, with both checking in around 87%.
If just SPF was failing I’d look at fixing SPF. If just DKIM was failing I’d look to fix DKIM. But with both failing at roughly the same rate I don’t understand what’s causing the failures or how to go about resolving them.
Without seeing more data, it is difficult to help, but here are common reasons why.
You’re currently viewing data from the past 7 days, which may include email activity from before domain authentication was fully enabled in your SendGrid account. As a result, the data reflects a mix of pre- and post-authentication activity, which may explain why full compliance isn’t yet showing.
There are more than 1 account in use. When configuring a SendGrid account, it will only authenticate emails sent from that specific account. Even if another account uses the same domain to send from, it must be configured separately.
It may include data from another provider that isn’t compliant yet. SendGrid email infrastructure, as well as Microsoft’s, can be used by third party service providers to send emails on behalf of their customers. They often end up under the same source label, but ultimately would need to be configured separately. Since you use dmarcian, I suggest you review the detail viewer to drill down to the specifics.
Finally, I suggest you reach out to our support team at support@dmarcian.com. The forums are public and are not best suited for technical support since we likely need to take a closer look at your domain data to help you better.