Skip to content

Home Topics Email Authentication ARC

Email Authentication · ARC

ARC (Authenticated Received Chain) glossary: key terms explained

Short answer

ARC (Authenticated Received Chain): ARC preserves authentication results across intermediaries such as mailing lists and forwarders. Each hop signs the results it saw, so the final receiver can trust an earlier pass even if SPF or DKIM broke in transit.

Terms below appear throughout guides on ARC (Authenticated Received Chain). Each definition is one or two sentences; follow the links in the sidebar for the full guides.

Core terms#

ARC (Authenticated Received Chain)

ARC preserves authentication results across intermediaries such as mailing lists and forwarders. Each hop signs the results it saw, so the final receiver can trust an earlier pass even if SPF or DKIM broke in transit.

SPF

A DNS record listing servers authorized to send for a domain. Checked against the connecting IP.

DKIM

A cryptographic signature on each message, verified with a public key in DNS.

DMARC

A policy record telling receivers what to do when SPF and DKIM fail alignment, plus reporting.

Alignment

Agreement between the visible From domain and the domain that passed SPF or DKIM.

Sender reputation

A provider's running assessment of a domain or IP based on complaints, bounces, engagement, and authentication.

Inbox placement

Share of accepted mail that lands in the inbox rather than spam.

Spam trap

An address that never opted in, used to catch senders with poor list practices.

BIMI

A DNS record pointing to a brand logo displayed next to authenticated mail; requires DMARC enforcement.

Feedback loop

A provider program that reports recipient spam complaints back to the sender.

Frequently asked questions#

Do I need ARC as a sender?

No. ARC is implemented by intermediaries and receivers. Senders benefit indirectly when their mail is forwarded.

Which providers honor ARC?

Gmail, Microsoft, and Yahoo all evaluate ARC when deciding whether to override a DMARC failure.

Analyse your own setup

All analysers
Technical analysis

SPF record analyser

Parse an SPF record, count its DNS lookups, and find what will break it.

Runs in your browser
Technical analysis

DMARC record analyser

Grade a DMARC record on enforcement, not just syntax.

Runs in your browser
Technical analysis

DKIM key analyser

Check a DKIM public key's strength, revocation state, and tags.

Runs in your browser

Keep reading on ARC