Home/Notes/What a plant nursery needs to know about DMARC

What a plant nursery needs to know about DMARC

14 Sep 2025

How a plant nursery deals with DMARC — and what usually goes wrong.

Sender outbound email DNS lookup DMARC DMARC HTTP bookmarks after… Mail server plant-nursery.c… Inbox delivered

The problem: HTTP bookmarks after a forced HTTPS move. The DMARC check fails for a plant nursery.

We do not start with a platform when handling DMARC. We write down who types what, who gets the mail, and what must not get lost. That list is always shorter than a vendor pitch deck.

We have seen agencies charge a plant nursery for a yearly DMARC audit that consists of a screenshot and a paragraph. Ours is a working config file they can apply themselves.

We solved DMARC for a plant nursery by moving it behind a reverse proxy. The old configuration stayed live as a fallback for forty-eight hours, then we pulled it.

HTTPS is table stakes, but DMARC is where trust actually lives for a plant nursery. A padlock with a misconfigured record behind it is decoration, not security.

Most of the damage we see in DMARC comes from doing too much. A single correct record beats three that were supposed to be clever.

More notes

Related notes

Tell us what you need.

Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.

hello@digitalserved.com