DKIM Alignment
DKIM alignment requires the DKIM d= signing domain to align with the visible From domain. A DKIM pass for an ESP domain does not satisfy DMARC if it does not align.
Relaxed vs strict
adkim=r allows organizational domain alignment; adkim=s requires exact equality between d= and From domains.
v=DMARC1; p=none; adkim=r; rua=mailto:[email protected]ESP configuration
Enable “custom domain DKIM” / “aligned signing” so d= matches your brand (or a subdomain within the same organizational domain under relaxed mode).
How QuickDMARC helps
Identify sources with dkim=pass but dmarc=fail due to alignment, which is one of the most common DMARC rollout blockers.
Frequently asked questions
DKIM pass + DMARC fail?
Almost always an alignment mismatch on d= vs From.
Is aligned DKIM enough alone?
Yes for DMARC pass if alignment succeeds—even when SPF fails.
Strict mode risks?
Breaks legitimate subdomain signing patterns; use only deliberately.