The authentication mistakes that pass — and still fail

The authentication mistakes that pass — and still fail
Framing line: "SPF, DKIM, DMARC all green" doesn't mean aligned. Misalignment is the silent killer. Curated clarity:

🚀 Deliverability
— Alignment vs. authentication explainer — made the cut for finally separating the two: DMARC needs the From-domain to match a passing SPF or DKIM domain.
— ESP shared-domain gotcha — picked because sending "on behalf of" via your ESP's domain can break alignment without breaking the checks.

🧪 Tests
— The DMARC aggregate-report reader — worth it for turning XML reports into a plain pass/fail per source.

📥 Swipe
— p=none to p=reject migration plan — included as the safe ramp to enforcement.

Lesson: green checkmarks aren't alignment. Read the reports.
Saved you ~2 hours of DNS confusion.