<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>DMARCtools.org news</title><link>https://dmarctools.org/news</link><description>Standards updates and email sender requirements.</description><language>en</language><lastBuildDate>Sun, 25 Oct 2026 00:00:00 GMT</lastBuildDate><item><title>Rspamd October updates fix security and authentication checks</title><link>https://dmarctools.org/news/rspamd-4-2-1-security-authentication-fixes</link><guid>https://dmarctools.org/news/rspamd-4-2-1-security-authentication-fixes</guid><description>Rspamd 4.2.3 fixes trust in ARC chains with invalid seals, following earlier October security updates. Gateway operators should review trust and scoring rules.</description><pubDate>Sun, 04 Oct 2026 00:00:00 GMT</pubDate></item><item><title>hMailServer October updates fix DKIM forgery and delivery flaws</title><link>https://dmarctools.org/news/hmailserver-6-3-6-authentication-delivery-security</link><guid>https://dmarctools.org/news/hmailserver-6-3-6-authentication-delivery-security</guid><description>Progressive Robot’s hMailServer 6.3.7 fixes signing of forged mail with hosted domains’ DKIM keys, following 6.3.6’s authentication and delivery fixes.</description><pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Cisco warns of exploited Secure Email Gateway attachment flaw</title><link>https://dmarctools.org/news/cisco-secure-email-gateway-exploited-attachment-flaw</link><guid>https://dmarctools.org/news/cisco-secure-email-gateway-exploited-attachment-flaw</guid><description>Cisco confirms exploitation of CVE-2026-76519. Gateway operators should verify scanner updates and check for compromise across their clusters.</description><pubDate>Sun, 25 Oct 2026 00:00:00 GMT</pubDate></item><item><title>PingOne asks administrators to prepare DKIM by 31 October</title><link>https://dmarctools.org/news/pingone-dkim-email-trust-october-deadline</link><guid>https://dmarctools.org/news/pingone-dkim-email-trust-october-deadline</guid><description>PingOne announces DKIM requirements for email trust and changes to notification customization. Administrators should prepare DNS before the stated date.</description><pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Stalwart 0.16.25 fixes DKIM key rotation failures</title><link>https://dmarctools.org/news/stalwart-0-16-25-dkim-key-rotation-fixes</link><guid>https://dmarctools.org/news/stalwart-0-16-25-dkim-key-rotation-fixes</guid><description>Stalwart fixes rotation bugs that could leave mail unsigned or activate unpublished DKIM keys. Operators should check DNS management and delivered signatures.</description><pubDate>Sun, 11 Oct 2026 00:00:00 GMT</pubDate></item><item><title>iCloud spoofing disclosure shows limits of domain authentication</title><link>https://dmarctools.org/news/icloud-header-spoofing-disclosure</link><guid>https://dmarctools.org/news/icloud-header-spoofing-disclosure</guid><description>SEC Consult discloses iCloud header-parsing flaws that passed SPF, DKIM and DMARC. Its timeline confirms remediation in December 2025.</description><pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Stalwart September updates fix DMARC results and reports</title><link>https://dmarctools.org/news/stalwart-september-dmarc-reporting-fixes</link><guid>https://dmarctools.org/news/stalwart-september-dmarc-reporting-fixes</guid><description>Stalwart’s September releases correct DMARC result labels and aggregate report XML. Operators should check logs and newly generated reports after upgrading.</description><pubDate>Sun, 04 Oct 2026 00:00:00 GMT</pubDate></item><item><title>UK census finds reporting records still naming retired Mail Check</title><link>https://dmarctools.org/news/uk-census-retired-mail-check-reporting</link><guid>https://dmarctools.org/news/uk-census-retired-mail-check-reporting</guid><description>A September study finds old Mail Check destinations in public-sector DMARC and TLS reporting records, prompting a review of replacement monitoring.</description><pubDate>Mon, 21 Sep 2026 00:00:00 GMT</pubDate></item><item><title>IETF mail transition changes address rewriting for DMARC</title><link>https://dmarctools.org/news/ietf-mail-transition-dmarc-rewriting</link><guid>https://dmarctools.org/news/ietf-mail-transition-dmarc-rewriting</guid><description>The IETF’s September mail transition rewrites addresses according to SPF and DMARC policies. Teams using its lists should check headers and replies.</description><pubDate>Sun, 27 Sep 2026 00:00:00 GMT</pubDate></item><item><title>DMARC moves onto the IETF Standards Track</title><link>https://dmarctools.org/news/dmarc-new-standards-2026</link><guid>https://dmarctools.org/news/dmarc-new-standards-2026</guid><description>Three new RFCs replace the original DMARC specification, separating the core protocol from reporting.</description><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Outlook requires authentication from high-volume senders</title><link>https://dmarctools.org/news/outlook-high-volume-sender-requirements</link><guid>https://dmarctools.org/news/outlook-high-volume-sender-requirements</guid><description>Microsoft’s May 2025 change makes SPF, DKIM, and DMARC an operational requirement for affected senders.</description><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Gmail’s bulk sender rules: the authentication baseline</title><link>https://dmarctools.org/news/gmail-bulk-sender-requirements</link><guid>https://dmarctools.org/news/gmail-bulk-sender-requirements</guid><description>A reference brief on the requirements introduced in 2024 for senders reaching personal Gmail accounts.</description><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate></item></channel></rss>