Email deliverability terms explained: SPF, DKIM, DMARC, and the rest

Deliverability vocabulary gets thrown around loosely enough that it is worth pinning down what each term actually means in the context you will encounter it - a bounce message, a DNS record, or a DMARC aggregate report.

Authentication terms

• SPF (Sender Policy Framework): a DNS TXT record listing which servers are authorised to send mail for a domain, checked against the envelope-from (MAIL FROM) address, not the visible From header.
• DKIM (DomainKeys Identified Mail): a cryptographic signature added to outgoing mail, verified against a public key published in DNS at a selector (selector._domainkey.example.com). Confirms the message content was not altered in transit and was genuinely sent by a holder of the private key.
• DMARC (Domain-based Message Authentication, Reporting and Conformance): a policy, published in DNS, telling receivers what to do with mail that fails SPF/DKIM alignment (none, quarantine, reject), plus a reporting address for aggregate (rua) and forensic (ruf) reports.
• Alignment: whether the domain that passed SPF or DKIM matches the domain in the visible From header, under relaxed (subdomain match allowed) or strict (exact match only) mode.
• BIMI: a DNS-published logo record that displays a verified brand mark in supporting inboxes, gated on DMARC being at enforcement.

Reputation and signal terms

• Sender reputation: the ongoing, provider-specific score (not publicly numeric at most providers) built from authentication consistency, complaint rate, engagement, and list hygiene over time.
• Spam-trap: an email address that never opted in and exists specifically to catch senders with poor list-acquisition practices; hitting one is treated as a strong negative signal, more severe than an ordinary bounce.
• Feedback loop (FBL): a subscription with a mailbox provider that delivers an abuse report (typically ARF format) whenever a recipient marks a message as spam.
• Engagement: opens, clicks, and replies used by inbox providers as an ongoing input to placement decisions, not just as a marketing metric.
• Warm-up: the practice of gradually increasing sending volume from a new or dormant mailbox/IP so reputation builds before volume scales, rather than sending at full volume immediately.

Bounce and protocol terms

DNS record terms

• PTR record: reverse DNS, mapping an IP address back to a hostname; checked by receivers against the connecting IP.
• TTL (time to live): how long a DNS answer may be cached before a resolver is required to re-query.
• MX record: specifies which server(s) handle inbound mail for a domain, with a priority value for failover.
• FCrDNS (forward-confirmed reverse DNS): when a PTR lookup's hostname also resolves forward to the same IP - the consistency check many receivers use to flag suspicious connections.

A worked example using several terms together

550 5.7.1 Message rejected due to DMARC policy. The domain example.com
has a DMARC policy of reject, and this message failed SPF and did
not have an aligned DKIM signature.

Reading this with the glossary above: this is a hard bounce (5xx, permanent), caused by DMARC enforcement (p=reject) because the message failed both SPF and aligned DKIM - meaning the sending infrastructure was not authorised in the domain's SPF record and did not carry a DKIM signature whose d= domain matched the From header under the domain's alignment setting.

What not to do

Do not use "spam score" as if it were a single universal number - different providers and filters compute entirely separate, usually non-public scores, and there is no one figure that represents your standing everywhere. Do not confuse a soft bounce with a hard bounce when deciding whether to remove an address from a list - repeated soft bounces over time should eventually be treated as effectively hard, but a single soft bounce is not evidence of an invalid address. And do not treat "warmed up" as a permanent state - reputation decays with inactivity, and a dormant mailbox needs re-warming, not a resumed full-volume send.

Where MailPilot fits

MailPilot covers the practical side of most of these terms directly: it warms mailboxes gradually, checks SPF, DKIM and DMARC on the sending domain, and tracks per-mailbox reputation daily with real inbox placement measured per provider through a seed-inbox network - so the terms in this glossary map to monitored numbers, not just definitions.