DKIM/SPF and DMARC

[CColotti]

I am moving forward with the same Square for Restaurants and Email marketing from Square and I run very strict DMARC on my domains.    I've been concerned this is going to be an issue for the order emails as well as the marketing ones.  There is conflicting information how to set this up for the weebly site to send emails as well as the EMail marketing side of Square.

My understanding in reading other posts is this is not very clear how to configure for DMARC compliance on either Square online OR marketing, can someone please clarify this?  Disabling DMARC really is not a good option and ensures better email delivery.

Cross posted here and in the Marketing board since they are different products

[Donnie-M]

@CColotti I may be missing some of this completely, but all of the order e-mails come from square directly and not your e-mail server.

"The sender profile lets your customers know who you are as a business and is the information that displays in the email’s footer with your business name, email address, and physical address."

Your information is included in the e-mail on online orders from the website from what I know.  Marketing, I will have to take a look also.

[CColotti]

Yes but if they "send as" yourdomain.com and DMARC is configured properly they will not be an allowed sender of that domain.  This is not a new function in the email world and ensures proper delivery of your domain named emails...It's SOP for Mailchimp/ActiveCampaign etc to allow emails to be properly authenticated using SPF or DKIM to comply with DMARC anti spoofing configurations.

[Donnie-M]

@CColotti Thank you for the clarification.  I may not be of much help, but I do think this is important to understand for my self included.

This is what the current order e-mails look like for me:

The reply of course fills in my e-mail address but it does have the via in the senders info.  So from what I understand from mailchimp is that this follows the guidelines for the sender address to match the server authentication that it is coming from square/weebly.

[CColotti]

@Donnie-M DO you know if you Have DKIM/SPF and DMARC configured on your domain level though?  It's something you have to do on your own but it protects your domain from un-authorized senders.  I use it on all my domains that send email and it validates messages and cuts down on spam.

Mailchimp has a method to authorize emails so that is what I am trying to find out about the square side for both weebly emails and marketing emails since they are different products.

[Donnie-M]

@CColotti I am sorry I haven't been much help with this, but thank you again, I am learning more than I am helping.

My domain is not set up and I found a test website to scan it *no endorsements here just what I googled and found*

https://easydmarc.com/tools/domain-scanner

[CColotti]

Yeah no worries.  I have used EasyDMARC for scanning tests, but I regularly use another tool I like.  mxtoolbox is good too.

https://app.screencast.com/DrEUmRmfIFUPY

That is what it reports when it's "fully" configured.  DMARC is a GOOD thing when setup and supported hence my questions when using any SaaS tool.

It has in fact prevented fake servers from spoofing my other domains, so it's important that it is supported on both weebly/marketing emails, but the answer still is not clear other that "you must call support" which seems really odd as it is not something support configures YOU configure domain to list the sending server's authentication.  It may require support to produce the proper DKIM keys from their side to provide for sure.

[CColotti]

And it definitely rejects non authorized senders...so it's a good thing AND means messages to customers are generally NOT sent to the SPAM folder by just about every email provider.

https://app.screencast.com/oTW4uHYeExwiN

[CColotti]

This still is not fixed or even being addressed and ALL Square online order emails go to customer SPAM because none of y'all understand Email domain authentication on the weebly side...I've been saksng to talk to a real engineer with a clue for months and got radio silence and even my ticket went silent..