Google DMARC Policy Changes?

32•flajr•8mo ago

Hello, does anyone know about recent Google/Gmail DMARC changes?

I noticed new field "DMARC" in the "Show original" message overview and caused for the message with valid DKIM and SPF to be delivered to Spam. No such field exist in the interface for older messages, so this is something fresh.

After creating default _dmarc TXT record (with p=none currently), it was fixed.

Anyone heard something? Thank you.

EDIT: Based on older messages, that field was added 1 of May.

Comments

paulschreiber•8mo ago

I've seen "DMARC: 'PASS'" on Show Original for a long time (years?).

flajr•8mo ago

Maybe when the record for that domain existed, it showed up even then. But I checked this for few emails older than May, and it is not there until 1st of May, where it is failing, if record does not exist.

jeroenhd•8mo ago

It looks like this started all the way back in the beginning of last year: https://www.mimecast.com/blog/guide-to-google-dmarc-setup/

This overview also shows other requirements you may have missed: https://www.proofpoint.com/us/blog/email-and-cloud-threats/g...

As for DMARC in the headers, I'm pretty sure Google has done that for years when DMARC is being checked (i.e. when it's being offered by the sending domain).

zinekeller•8mo ago

Canonical links to Google's advice: https://support.google.com/a/answer/81126 and https://support.google.com/a/answer/14229414

(and yes, this was supposed to be enforced last year)

appreciatorBus•8mo ago

As long as I can remember there have been 3 lines in “Show Original”: SPF, DKIM, DMRARC.

Google does have newish (early 2024) policy regarding messages purporting to be from domains which lack a DMARC policy statement. But this is about mail delivery, not the Show Original UI feature. It’s possible they have been only slowly ramping up implementation or perhaps your domain was previously under the threshold but is now over.

https://blog.google/products/gmail/gmail-security-authentica...

Brajeshwar•8mo ago

Is this new? Some time back (a year back or so), CloudFlare pushed setting up SPF, DKIM, DMRARC the right way and I did so for a lot of my domains. That was the time I read about Google and others being more strict about email deliveries.

macintux•8mo ago

This should have an “Ask HN: ” prefix in the title, although that rule is not strictly enforced.

https://news.ycombinator.com/ask for other examples.

flajr•8mo ago

Well, thought it is added automatically, sorry about that.

macintux•8mo ago

Probably should be.

LLMs are powerful, but enterprises are deterministic by nature

Ask HN: Anyone Using a Mac Studio for Local AI/LLM?

Ask HN: Ideas for small ways to make the world a better place

Ask HN: Non AI-obsessed tech forums

Ask HN: 10 months since the Llama-4 release: what happened to Meta AI?

Ask HN: Who wants to be hired? (February 2026)

Ask HN: Non-profit, volunteers run org needs CRM. Is Odoo Community a good sol.?

Ask HN: Who is hiring? (February 2026)

AI Regex Scientist: A self-improving regex solver

Tell HN: Another round of Zendesk email spam

Ask HN: Is Connecting via SSH Risky?

Ask HN: Has your whole engineering team gone big into AI coding? How's it going?

Ask HN: Why LLM providers sell access instead of consulting services?

Ask HN: What is the most complicated Algorithm you came up with yourself?

Ask HN: How does ChatGPT decide which websites to recommend?

Ask HN: Is it just me or are most businesses insane?

Ask HN: Mem0 stores memories, but doesn't learn user patterns

Ask HN: Is there anyone here who still uses slide rules?

Ask HN: Any International Job Boards for International Workers?

Kernighan on Programming

Ask HN: Anyone Seeing YT ads related to chats on ChatGPT?

Ask HN: Does global decoupling from the USA signal comeback of the desktop app?

We built a serverless GPU inference platform with predictable latency

Ask HN: Does a good "read it later" app exist?

Ask HN: How Did You Validate?

Ask HN: Have you been fired because of AI?

Ask HN: Cheap laptop for Linux without GUI (for writing)

Ask HN: Anyone have a "sovereign" solution for phone calls?

Ask HN: OpenClaw users, what is your token spend?

Test management tools for automation heavy teams