Monitoring matters!

• DMARC serves to detect senderdomain abuse

• If you don’t monitor you will not detect abuse

• Most of the time you will enable Email Authentication for domains in production

• If you get it wrong the errors will impact production

• If you monitor and stage you will see your own errors

Legal Aspects

• German law considers DMARC reports subject to GDPR (DSGVO)

• Countries that may force their companies to hand over data are problematic

• Monitoring services are mostly cloud-based

• On premises software means using open source software

What do we see when we monitor?

Example

Questions?