The day authentication stopped being optional
Rule changeGoogle and Yahoo · 1 February 2024
- What was done
- Google and Yahoo began requiring bulk senders to authenticate with SPF, DKIM and DMARC together, keep spam complaints under 0.3%, and offer one-click unsubscribe honoured within two days.
- What was right
- Both published the requirements months ahead, with thresholds and dates. This was one of the best telegraphed changes in email, and the documentation is still there.
- What went wrong
- Senders who had run for a decade on one SPF record kept sending exactly as before. There is no bounce for failing DMARC alignment, so open rates fell quietly and teams blamed subject lines.
- What should have happened
- Check all three records before the deadline, not after the numbers move. Two out of three counts as none, and passing SPF for your tool’s domain does nothing if your From address is your own.
Our own arithmetic on a modelled sender: 80,000 emails a month, 38% open rate, 2.1% click, 3% of clicks converting at 210 dollars. That is roughly 40,000 dollars a month attributable to the channel. A silent 30% delivery loss removes about 12,000 dollars a month and shows up nowhere in the sending dashboard, because the dashboard counts sends.