Article
SPF Alignment vs DKIM Alignment: What DMARC Checks
reviewmyemails.com
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
The mode matters too. In relaxed mode (the default), the domains just need to share the same organizational domain. So mail.deepcurrent.io aligns with deepcurrent.io under relaxed rules. In strict mode, the domains must match exactly. Strict mode is tighter but also more fragile if you're using subdomains for sending. “So no, you don't need both to pass DMARC.” If you're not sure whether your alignment is actually passing, the free Email Header Analyzer at RME will show you exactly what's aligned and what's not. Worth a quick check before assuming everything is fine.