Domain-Based Message Authentication, Reporting, and Conformance (DMARC)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 69
Abstract: This document describes the Domain-based Message Authentication, Reporting, and Conformance (DMARC) protocol. DMARC permits the owner of an email's Author Domain to enable validation of the domain's use to indicate the Domain Owner's or Public Suffix Operator's message handling preference regarding failed validation and to request reports about the use of the domain name. Mail-receiving organizations can use this information when evaluating handling choices for incoming mail. This document obsoletes RFCs 7489 and 9091.
Publication Date: 2026-05-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9989
Link: https://doi.org/10.17487/RFC9989
Author(s): Todd Herr
John R. Levine

Latest version of IETF RFC 9989

Document Versions — IETF RFC 9989

▶ IETF RFC 9989 (2026-05-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1035 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4343 [Active*]
IETF RFC 5234 [Active, Amended*]
IETF RFC 5321 [Active*]
IETF RFC 5322 [Active, Amended*]
IETF RFC 5890 [Active*]
IETF RFC 6376 [Active*]
IETF RFC 6377 [Active*]
IETF RFC 6591 [Active*]
IETF RFC 6651 [Active*]
IETF RFC 6652 [Active*]
IETF RFC 7208 [Active*]
IETF RFC 7405 [Active*]
IETF RFC 8174 [Active*]
RFC8601 — RFC8601 EXTERNAL
IETF RFC 9990 [Active*]
IETF RFC 9991 [Active*]

Bibliographic Reference(s)

Messaging Malware Mobile Anti-Abuse Working Group (M3AAWG), "M3AAWG Email Authentication Recommended Best Practices", <https://www.m3aawg.org/sites/default/files/doc_files/m3aawg-email-authentication-recommended-best-practices-09-2020.pdf>. EXTERNAL
Messaging Malware Mobile Anti-Abuse Working Group (M3AAWG), "M3AAWG Best Practices for Managing SPF Records", <https://www.m3aawg.org/sites/default/files/doc_files/m3aawg_managing-spf_records-2017-08.pdf>. EXTERNAL
IETF RFC 2142 [Active*]
IETF RFC 2308 [Active*]
IETF RFC 3464 [Active*]
IETF RFC 4870 [Superseded*]
IETF RFC 5598 [Active*]
IETF RFC 7489 [Superseded*]
RFC7858 — RFC7858 EXTERNAL
RFC7960 — RFC7960 EXTERNAL
IETF RFC 8020 [Active*]
IETF RFC 8126 [Active*]
RFC8484 — RFC8484 EXTERNAL
IETF RFC 8551 [Active*]
RFC8552 — RFC8552 EXTERNAL
RFC8617 — RFC8617 EXTERNAL
RFC9091 — RFC9091 EXTERNAL
RFC9364 — BCP237 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9989.json

Supersedes:

IETF RFC 7489 [Superseded*]

RFC9091 — RFC9091 EXTERNAL

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9989, Domain-Based Message Authentication, Reporting, and Conformance (DMARC). Available at https://doi.org/10.17487/RFC9989

Snippet:

IETF RFC 9989, Domain-Based Message Authentication, Reporting, and Conformance (DMARC). Available at https://doi.org/10.17487/RFC9989

HTML (ISO 690 compliant)

Preview:

IETF RFC 9989, Domain-Based Message Authentication, Reporting, and Conformance (DMARC). Available at https://doi.org/10.17487/RFC9989

Snippet:

<span class="citation"><cite>IETF RFC 9989</cite>, Domain-Based Message Authentication, Reporting, and Conformance (DMARC). Available at <a href="https://doi.org/10.17487/RFC9989" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9989</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9989, Domain-Based Message Authentication, Reporting, and Conformance (DMARC)
doi: 10.17487/RFC9989
url: https://doi.org/10.17487/RFC9989

Snippet:

<li>
<cite id="bib-rfc9989">IETF RFC 9989</cite>, Domain-Based Message Authentication, Reporting, and Conformance (DMARC)
<span class="doi">10.17487/RFC9989</span>
</li>

Referenced By

IETF RFC 9990 [Active*]
IETF RFC 9991 [Active*]