{
  "id": 10415834,
  "title": "My Waitlist Emails Passed SPF and DKIM but Failed DMARC",
  "url": "https://urgent.news/2026/09/28/my-waitlist-emails-passed-spf-and-dkim-but-failed-dmarc",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-28T09:58:47.000Z",
  "source": {
    "name": "HackerNoon",
    "slug": "hackernoon",
    "url": "https://hackernoon.com/my-waitlist-emails-passed-spf-and-dkim-but-failed-dmarc?source=rss"
  },
  "original_language": "en",
  "account": "Vesprit is an application that predicts what users are about to forget and reminds them before it is too late. The author wrote about a bug in the waitlist feature that caused emails to end up in spam. Despite passing SPF and DKIM checks, the emails failed DMARC authentication. The author initially blamed the email content and email propagation, as well as a new sending address, but the root cause was that the domain used in the 'From' header was different from the authenticated domain. DMARC authentication requires the 'From' domain to match the authenticated domain, and in this case, Gmail was sending from its own address, gmail.com, which did not match the Vesprit domain. The DMARC policy was set to monitoring mode, meaning that Gmail did not actually block the emails, but the failure was still reported. The author fixed the issue by using a domain they controlled in the 'From' header, ensuring alignment between the authenticated domain and the 'From' domain.",
  "summary": "Vesprit’s emails passed SPF and DKIM but failed DMARC because the authenticated domain did not align with the visible From address.",
  "key_points": [
    "Waitlist emails passed SPF and DKIM checks",
    "DMARC authentication failed due to domain mismatch",
    "Issue resolved by aligning From domain with authenticated domain"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}